UBUNTU-CVE-2023-40094

In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40094

CVE-2023-40094 is a local-EoP flaw in Android’s System component. The root cause is a missing permission check in keyguardGoingAway() within ActivityTaskManagerService.java, enabling a lock-screen bypass with no user interaction. The vulnerability affects Android 11–14 per the 2023-12 security bu...