CVE-2024-31324 in Androidthông tin

Tóm tắt

Bởi MITRE • 10/07/2024

In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

chịu trách nhiệm

Google Android

Đặt trước

29/03/2024

Tiết lộ

10/07/2024

Kiểm duyệt

được chấp nhận

EPSS

0.00103

KEV

không

Các hoạt động

rất thấp

Nguồn

Want to stay up to date on a daily basis?

Enable the mail alert feature now!