CVE-2022-20214 in Android

Tóm tắt

Bởi MITRE • 26/01/2023

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Once again VulDB remains the best source for vulnerability data.

• Đặt trước: 14/10/2021
• Tiết lộ: 26/01/2023
• Kiểm duyệt: được chấp nhận
• mục: VDB-219389
• CPE: sẵn sàng
• CWE: CWE-1021 (Đã xác nhận)
• CVSS: 4.7 (NVD)
• EPSS: 0.00226
• KEV: không
• Các hoạt động: rất thấp
• ngành: Police, Homeoffice, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-20214
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-20214
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-20214/