CVE-2022-20112

In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20112

In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20112

The CVE-2022-20112 issue is in Android’s PrivateDnsPreferenceController.java getAvailabilityStatus. A guest user can bypass permissions to change private DNS settings, enabling local escalation of privilege with no additional execution privileges and no user interaction required. Affected Android...