CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2020/12/15 4:15 p.m.•18 views

CVE-2020-0500

In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.4AI score0.0015EPSS

Exploits0References1

ATTACKERKB•added 2020/12/15 4:15 p.m.•3 views

CVE-2020-0500

5.5CVSS5.6AI score0.0015EPSS

Exploits0References2

CVE•added 2020/12/15 3:58 p.m.•151 views

CVE-2020-0500

CVE-2020-0500 affects Android 11 via InputMethodManager.startInputUncheckedLocked, where an unsafe PendingIntent enables a local information-disclosure permission bypass with no user interaction required. Root cause: unsafe PendingIntent in InputMethodManager.java. Impact is local (not remote) an...

5.5CVSS5.8AI score0.0015EPSS

Exploits0References1Affected Software1