Lucene search
Google_androidVULNRICHMENT:CVE-2023-40094HistoryDec 04, 2023 - 10:40 p.m.
CVE-2023-40094
2023-12-0422:40:53
google_android
github.com
1
lock screen bypass
activitytaskmanagerservice
missing permission check
local escalation of privilege
no user interaction
In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
ubuntucve
ubuntucve
CVE-2023-40094
2023-12-04 00:00:00
nvd
nvd
CVE-2023-40094
2023-12-04 23:15:24
cvelist
cvelist
CVE-2023-40094
2023-12-04 22:40:53
prion
prion
Design/Logic Flaw
2023-12-04 23:15:00
osv
osv
No permission checks on ActivityTaskManagerService#keyguardGoingAway
2023-12-01 00:00:00
cve
cve
CVE-2023-40094
2023-12-04 23:15:24
AI Score
7.1
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-40094