Lucene search
PRIOn knowledge basePRION:CVE-2023-20913HistoryJan 26, 2023 - 9:18 p.m.
Design/Logic Flaw
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
2
logic flaw
phone account settings
tapjacking
overlay attack
local privilege escalation
user interaction
android-10
android-11
android-12
android-12l
android-13
a-246933785
nvd
0.0004 Low
EPSS
Percentile
5.1%
In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246933785
Related
cvelist
cvelist
CVE-2023-20913
2023-01-24 00:00:00
cnvd
cnvd
Google Android Elevation of Privilege Vulnerability (CNVD-2023-18910)
2023-01-09 00:00:00
cve
cve
CVE-2023-20913
2023-01-26 21:18:11
nvd
nvd
CVE-2023-20913
2023-01-26 21:18:11
osv
osv
Outgoing call redirection by phone account settings tapjacking
2023-01-01 00:00:00