Lucene search
PRIOn knowledge basePRION:CVE-2023-21244HistoryOct 06, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-10-0619:15:00
PRIOn knowledge base
www.prio-n.com
3
notification
local privilege
user profile boundaries
permission check
exploitation
user interaction
0.0004 Low
EPSS
Percentile
5.1%
In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
References
android.googlesource.com/platform/frameworks/base/+/20aedba4998373addc2befcc455a118585559fef
android.googlesource.com/platform/frameworks/base/+/3a448067ac9ebdf669951e90678c2daa592a81d3
android.googlesource.com/platform/frameworks/base/+/5a3d0c131175d923cf35c7beb3ee77a9e6485dad
source.android.com/security/bulletin/2023-10-01
Related
cve
cve
CVE-2023-21244
2023-10-06 19:15:12
ubuntucve
ubuntucve
CVE-2023-21244
2023-10-06 00:00:00
cvelist
cvelist
CVE-2023-21244
2023-10-06 18:48:40
nvd
nvd
CVE-2023-21244
2023-10-06 19:15:12
