icon

We found results for “

CVE-2020-0115

Good to know:

icon

Date: June 10, 2020

In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150038428

Language: Java

Severity Score

Severity Score

Weakness Type (CWE)

Improper Privilege Management

CWE-269

Incorrect Authorization

CWE-863

Top Fix

icon

Upgrade Version

Upgrade to version android-10.0.0_r37,android-9.0.0_r56,android-8.1.0_r76,android-8.0.0_r47

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us