Lucene search
GoogleOSV:ASB-A-199754277HistoryDec 01, 2021 - 12:00 a.m.
EoP: overlay attack on KeyChainActivity
2021-12-0100:00:00
Google
osv.dev
8
overlay attack
keychainactivity
local privilege escalation
user interaction
software certificate stored
EPSS
0.001
Percentile
17.8%
In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Related
nvd
nvd
CVE-2021-0963
2021-12-15 19:15:11
cve
cve
CVE-2021-0963
2021-12-15 19:15:11
cvelist
cvelist
CVE-2021-0963
2021-12-15 18:05:49
prion
prion
Design/Logic Flaw
2021-12-15 19:15:00
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00