Lucene search
GoogleOSV:ASB-A-173025705HistoryNov 01, 2021 - 12:00 a.m.
NavigationModeController of System UI uses an unsafe PendingIntent
2021-11-0100:00:00
Google
osv.dev
10
navigationmodecontroller
system ui
unsafe pendingintent
shownotification
local escalation
privilege
user execution
exploitation
EPSS
0
Percentile
5.1%
In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for exploitation.
Related
cvelist
cvelist
CVE-2021-0932
2021-12-15 18:05:19
nvd
nvd
CVE-2021-0932
2021-12-15 19:15:11
prion
prion
Design/Logic Flaw
2021-12-15 19:15:00
cnvd
cnvd
cve
cve
CVE-2021-0932
2021-12-15 19:15:11