CVE-2023-21229 in Androidinformação

Sumário

de MITRE • 15/08/2023

In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

03/11/2022

Divulgação

15/08/2023

Moderação

aceite

Entrada

VDB-237165

CPE

pronto

EPSS

0.00091

KEV

não

Atividades

muito baixo

Sector

Finance, Lawfirm, ...

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-21229
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-21229
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-21229/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!