CVE-2021-0963

In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0963

In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0963

CVE-2021-0963 involves a tapjacking/overlay vulnerability in KeyChainActivity.java that could allow an app certificate stored in the Android keychain to be misused, resulting in local elevation of privilege. Public details in the provided documents confirm the issue affects Android versions 9–12 ...

CVE-2021-0954

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID:...

CVE-2021-0954

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID:...

CVE-2021-0954

CVE-2021-0954 is an Elevation of Privilege issue affecting Android’s ResolverActivity. A tapjacking/overlay attack could bypass user interaction and enable local privilege elevation with user interaction required. Affected versions include Android 10 and 11. Public references in the 2021-12 Andro...

PT-2021-13439

Name of the Vulnerable Software and Affected Versions Android versions 9 through 12 Description A denial of service issue exists due to a tapjacking/overlay attack in the UserDetailsActivity of AndroidManifest.xml. This could lead to a local denial of service with no additional execution privileg...

PT-2021-13440

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description In NotificationAccessActivity of AndroidManifest.xml, there is a possible elevation of privilege EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege...

PT-2021-13441

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to a possible elevation of privilege EoP due to a tapjacking/overlay attack in the onCreate of BluetoothPairingSelectionFragment.java. This could lead to local...

PT-2021-13421

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue allows an app to gain access to USB without the user's knowledge due to a tapjacking/overlay attack. This could lead to local escalation of privilege, with the attacker needing ...

CVE-2021-1039: Improper Restriction of Rendered UI Layers or Frames

In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2021-1040: Improper Restriction of Rendered UI Layers or Frames

In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2021-0963: Improper Restriction of Rendered UI Layers or Frames

In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0954: Improper Restriction of Rendered UI Layers or Frames

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID:...

CVE-2021-1038: Improper Restriction of Rendered UI Layers or Frames

In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2021-1016: Improper Restriction of Rendered UI Layers or Frames

In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

PT-2021-13369

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11 Description In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges...

PT-2021-13374

Name of the Vulnerable Software and Affected Versions Android versions 9 through 12 Description The issue concerns a possible tapjacking/overlay attack in the KeyChainActivity.java file. This could allow an app certificate stored in the keychain to be used, potentially leading to local escalation...

PUB-A-183610267

In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

CVE-2021-0583

In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...