Lucene search
GoogleOSV:ASB-A-195338390HistoryNov 01, 2021 - 12:00 a.m.
EoP in PackageManager
2021-11-0100:00:00
Google
osv.dev
13
eop
createorupdate
permission.java
missing permission check
local escalation
privilege
exploitation
software
internal permissions
EPSS
0
Percentile
5.1%
In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cve
cve
CVE-2021-0923
2021-12-15 19:15:11
cvelist
cvelist
CVE-2021-0923
2021-12-15 18:05:28
nvd
nvd
CVE-2021-0923
2021-12-15 19:15:11
prion
prion
Privilege escalation
2021-12-15 19:15:00
cnvd
cnvd