2 matches found
Code injection
In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
4.3CVSS7.6AI score0.00172EPSS
SaveExploits0References1Affected Software1
CVE-2022-20495: Incorrect Default Permissions
In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
7.8CVSS6AI score0.00172EPSS
SaveExploits0References2
20