CVE-2020-0210

In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

PT-2020-11568

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible permissions bypass to a confused deputy in the removeSharedAccountAsUser function of AccountManager.java. This could lead to local escalation of privilege, requiring Us...