accounts_CVE-2024-40676-

此存储库没有 README。...

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-40676

creationtimestamp| type| source ---|---|--- 2025-01-28 19:46:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113907701567556684 2025-01-28 20:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbj37ouj2r 2025-01-28 22:09:38+00:00| seen|...

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-40676

A local elevation of privilege vulnerability exists in Google Android within the checkKeyIntent function of AccountManagerService.java. Due to a confused deputy issue, an attacker can bypass intent security checks to install an unknown application. This attack does not require additional executio...