CVE-2024-11624

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-11624

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-11624

creationtimestamp| type| source ---|---|--- 2025-01-03 03:38:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113762339327194156 2025-01-03 04:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq5q6uwz2m 2025-01-03 04:42:41+00:00| seen|...

CVE-2024-11624

Google Android suffers from an Elevation of Privilege (EoP) vulnerability in the VPN subcomponent. The root cause is an undeclared permission that allows an attacker to add applications to bypass a VPN. This can lead to a local escalation of privilege without requiring additional execution privil...