ГлавнаяУязвимости → CVE-2024-23708
7.8высокая

CVE-2024-23708

Описание

In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Затрагиваемое ПО
Google Android
CVSS
Балл7.8 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://android.googlesource.com/platform/frameworks/base/+/0c095c365ede36257e829769194f9596a598e560https://source.android.com/security/bulletin/2024-05-01https://android.googlesource.com/platform/frameworks/base/+/0c095c365ede36257e829769194f9596a598e560https://source.android.com/security/bulletin/2024-05-01