2 matches found
CVE-2022-20475: Incorrect Default Permissions
In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...
7.8CVSS5.9AI score0.00131EPSS
SaveExploits0References2
CVE-2022-20475
In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...
8.5CVSS0.00131EPSS
SaveExploits0References1
20