Lucene search
GoogleOSV:ASB-A-158480899HistoryJan 01, 2021 - 12:00 a.m.
GrantCredentialsPermissionActivity allows cross-user, cross-app account grant/deny
2021-01-0100:00:00
Google
osv.dev
12
grantcredentialspermissionactivity
cross-user
cross-app
grant/deny
confused deputy
local information disclosure
account access
user interaction
EPSS
0
Percentile
5.1%
In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access with no additional execution privileges needed. User interaction is needed for exploitation.
Related
cvelist
cvelist
CVE-2021-0309
2021-01-11 21:47:03
nvd
nvd
CVE-2021-0309
2021-01-11 22:15:13
cve
cve
CVE-2021-0309
2021-01-11 22:15:13
prion
prion
Information disclosure
2021-01-11 22:15:00
threatpost
threatpost
Google Warns of Critical Android Remote Code Execution Bug
2021-01-05 20:21:40