Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guía y código teórico para CVE-2023-35674 Debido a que Android está fuera de mi liga, por favor usa esto como una visión general desde mi punto de vista sobre cómo explotaría este CVE. Los fragmentos de código son solo esqueletos, por favor ayuda : As...

CVE-2023-35674

In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35674

The CVE-2023-35674 issue affects the Android Framework, specifically an onCreate path in WindowState.java that can launch a background activity due to a logic error. This enables local elevation of privilege without extra execution privileges and without user interaction. The Android Security Bul...

CVE-2023-35674

creationtimestamp| type| source ---|---|--- 2023-09-06 16:05:21+00:00| exploited| https://t.me/thehackernews/3835 2023-09-06 17:11:46+00:00| seen| Telegram/63J2pVQJBaIknmjZGAIHn5x98Q9jXCZX7v9RgXfkNAcIQ 2023-09-06 18:31:04+00:00| seen| https://t.me/KomunitiSiber/752 2023-09-07 09:36:42+00:00| seen...

Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploited Flaw

Google has rolled out monthly security patches for Android to address a number of flaws, including a zero-day bug that it said may have been exploited in the wild. Tracked as CVE-2023-35674, the high-severity vulnerability is described as a case of privilege escalation impacting the Android...