Lucene search
Google_androidCVELIST:CVE-2023-20921HistoryJan 24, 2023 - 12:00 a.m.
CVE-2023-20921
2023-01-2400:00:00
google_android
www.cve.org
2
logic error
accessibilitymanagerservice.java
local privilege escalation
android-10
android-11
android-12
android-12l
android-13
a-243378132
EPSS
0
Percentile
5.1%
In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243378132
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
prion
prion
Code injection
2023-01-26 21:18:00
cve
cve
CVE-2023-20921
2023-01-26 21:18:11
nvd
nvd
CVE-2023-20921
2023-01-26 21:18:11
osv
osv
cnvd
cnvd
Google Android Elevation of Privilege Vulnerability (CNVD-2023-29379)
2023-01-09 00:00:00