Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-128674520
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 1 product
This weekend, I analyzed CVE-2020-0014 and built a working PoC to explore Android Toasts and how they could be abused in Tapjacking attack scenarios. 📖 Read the technical breakdown: https://lnkd.in/d-ExKfCS 🎥 Watch the attack in action: https://lnkd.in/dd8jhH5G
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | 10.0 | - | - | |
| OS | android | 8.0 | - | - | |
| OS | android | 8.1 | - | - | |
| OS | android | 9.0 | - | - |