CVE-2023-21257 (android) | allinfosecnews.com

July 13, 2023, 12:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

android app check cve escalation exploitation java local missing permission privilege privileges profile sideload work

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

C003561 On-line Vulnerability Assessment (OVA) Tool Manager (CTS) - WED 22 May

@ EMW, Inc. | Mons, Wallonia, Belgium

View on infosec-jobs.com

Engineer - IT Security Compliance

@ Tiffany & Co. | Parsippany, NJ, United States

View on infosec-jobs.com

Senior Restricted Research Compliance Specialist

@ University of Cincinnati | Cincinnati, OH, US

View on infosec-jobs.com

Senior Manager of Security Engineering - Employee Compute

@ JPMorgan Chase & Co. | Houston, TX, United States

View on infosec-jobs.com

Incident Response Analyst

@ Verisk | Jersey City, NJ, United States

View on infosec-jobs.com

Application Security Penetration Tester

@ Vodeno | Poland (remote)

View on infosec-jobs.com