CVE-2020-27098

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-27098

creationtimestamp| type| source ---|---|--- 2021-01-26 20:49:23+00:00| seen| https://t.me/cibsecurity/22648...

CVE-2020-27098

In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-27098

CVE-2020-27098 affects Android 11 and targets UriGrantsManagerService.checkGrantUriPermission. The vulnerability describes a permissions bypass that could allow an app to access contacts via a local, privilege-escalation path without user interaction. It is a local information-disclosure issue (c...