Lucene search
PRIOn knowledge basePRION:CVE-2021-39692HistoryMar 16, 2022 - 3:15 p.m.
Design/Logic Flaw
2022-03-1615:15:00
PRIOn knowledge base
www.prio-n.com
0.0005 Low
EPSS
Percentile
17.2%
In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209611539
Related
cvelist
cvelist
CVE-2021-39692
2022-03-16 14:04:10
cve
cve
CVE-2021-39692
2022-03-16 15:15:10
osv
osv
Set up Work Profile without User Consent
2022-03-01 00:00:00
nvd
nvd
CVE-2021-39692
2022-03-16 15:15:10
androidsecurity
androidsecurity
Chromecast Security Bulletin—July 2022
2022-07-18 00:00:00