Lucene search

[email protected]NVD:CVE-2023-29766

HistoryJun 09, 2023 - 8:15 p.m.

CVE-2023-29766

2023-06-0920:15:10

[email protected]

web.nvd.nist.gov

crossx android issue

local attacker

privilege escalation

database files

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the database files.

Affected configurations

Nvd

Node

appcrossxcrossxMatch1.15.3android

VendorProductVersionCPE
appcrossxcrossx1.15.3cpe:2.3:a:appcrossx:crossx:1.15.3:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
appcrossx	crossx	1.15.3	cpe:2.3:a:appcrossx:crossx:1.15.3:::::android::

References

github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29766/CVE%20detailed.md

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-29766

cvelist1 prion1 cve1