Lucene search
+L

898 matches found

attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•12 views

CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS7.2AI score0.00167EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/12 5:15 p.m.•37 views

CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS0.00167EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/12 5:15 p.m.•25 views

Privilege escalation

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

6.9CVSS7.2AI score0.00167EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2022/04/12 5:15 p.m.•42 views

CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS7.2AI score0.00167EPSS
SaveExploits0References3
OSV
OSV
•added 2022/04/12 5:15 p.m.•8 views

UBUNTU-CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS5.9AI score0.00167EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•39 views

CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.5AI score0.00167EPSS
SaveExploits0References1
Mend
Mend
•added 2022/04/12 4:11 p.m.•1 views

CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS0.00167EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/12 4:11 p.m.•208 views

CVE-2021-39796

CVE-2021-39796 affects HarmfulAppWarningActivity in Android (HarmfulAppWarningActivity.java). It enables a tapjacking/overlay technique to trick a user into installing a harmful app, potentially causing local escalation of privilege with User execution privileges and requiring user interaction fo...

7.3CVSS7.2AI score0.00167EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2022/04/12 4:11 p.m.•78 views

CVE-2021-39796

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS7.5AI score0.00167EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•4 views

CVE-2021-39796: Improper Restriction of Rendered UI Layers or Frames

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS7.3AI score0.00167EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/01 12:00 a.m.•1 views

PT-2022-1358

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue allows an attacker to trick a victim into installing a harmful app through a tapjacking/overlay attack in the HarmfulAppWarningActivity. This could lead to local escalation ...

7.3CVSS5.7AI score0.00167EPSS
SaveExploits0References10
OSV
OSV
•added 2022/04/01 12:00 a.m.•30 views

ASB-A-205595291

In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

7.3CVSS7.3AI score0.00167EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/16 3:15 p.m.•16 views

CVE-2021-39702

In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.8CVSS5.9AI score0.00334EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/16 3:15 p.m.•15 views

CVE-2021-39692

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

7.8CVSS7.2AI score0.00746EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/16 3:15 p.m.•13 views

CVE-2021-39692

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

9.3CVSS7.2AI score0.00746EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/16 3:15 p.m.•35 views

CVE-2021-39702

In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

9.3CVSS0.00334EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/16 3:15 p.m.•28 views

CVE-2021-39692

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

9.3CVSS0.00746EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/16 3:15 p.m.•32 views

Design/Logic Flaw

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

9.3CVSS7.6AI score0.00746EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/03/16 3:15 p.m.•22 views

Design/Logic Flaw

In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

9.3CVSS7.6AI score0.00334EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/16 2:04 p.m.•37 views

CVE-2021-39702

In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.9AI score0.00334EPSS
SaveExploits0References1
Rows per page
Query Builder