Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-0044
HistoryMar 11, 2024 - 5:15 p.m.

Input validation

2024-03-1117:15:00
PRIOn knowledge base
www.prio-n.com
12
input validation
local escalation
no user interaction

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%