VulnSocial

CVE-2020-0001(google / android)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-140055304

google CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Affected systems

Vendors
google
Products
android

4 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-11-07: 211-07
Referenced assets1 URL
Full discourse2 posts
  • 🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_9377

    CVE-2020-0001 | When isolation loses its boundary An isolated app should be like a visitor confined to a designated room. Android did not correctly handle isolated apps in getProcessRecordLocked, part of ActivityManagerService. The flaw could allow local privilege escalation on Android 8.0, 8.1, 9 and 10. The record says no additional execution privileges or user interaction were needed; that does not make it a remote attack. The lesson: app isolation depends on system code enforcing every boundary. Keep device security updates current.

    2000111
    3.2K followersView on X
  • 🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_9377

    This Android issue concerned local privilege escalation, not remote access. Affected versions in the record: 8.0, 8.1, 9 and 10. Lesson: isolation is only as strong as the code that enforces it. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2020/0xxx/CVE-2020-0001.json

    000017
    3.2K followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSgoogleandroid10.0--
OSgoogleandroid8.0--
OSgoogleandroid8.1--
OSgoogleandroid9.0--

Explore more

Back to dashboardgoogle CVEsandroid vulnerabilities