Lucene search
Google_androidVULNRICHMENT:CVE-2023-35668HistoryDec 04, 2023 - 10:40 p.m.
CVE-2023-35668
2023-12-0422:40:49
google_android
github.com
2
cve-2023-35668 notification.java visituris confusion execution privileges user interaction
In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cve
cve
CVE-2023-35668
2023-12-04 23:15:23
ubuntucve
ubuntucve
CVE-2023-35668
2023-12-04 00:00:00
nvd
nvd
CVE-2023-35668
2023-12-04 23:15:23
osv
osv
prion
prion
Information disclosure
2023-12-04 23:15:00
cnvd
cnvd
Google Android Information Disclosure Vulnerability (CNVD-2024-07116)
2023-12-06 00:00:00
cvelist
cvelist
CVE-2023-35668
2023-12-04 22:40:49
AI Score
6.2
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-35668