Lucene search

K
osvGoogleOSV:ASB-A-316893159
HistoryMar 01, 2024 - 12:00 a.m.

Privilege Escalation Vulnerability in AccountManager Due to Persistent Elevated Application Priority

2024-03-0100:00:00
Google
osv.dev
4
vulnerability
accountmanager
privilege escalation
application priority
session
accountmanagerservice
foreground service
incorrect handling
null responses
local escalation

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for OSV:ASB-A-316893159