ID:4592 - Exploit for Permissions, Privileges, and Access Controls in Google Android - CVE-2020-0096

 
Main Vulnerability Database Exploits ID:4592 - Exploit for Permissions, Privileges, and Access Controls in Google Android - CVE-2020-0096

ID:4592 - Exploit for Permissions, Privileges, and Access Controls in Google Android - CVE-2020-0096

Published: September 11, 2020


Vulnerability identifier: #VU28267
Vulnerability risk: Low
CVE-ID: CVE-2020-0096
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Google Android

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists within the Framework functionality of Android due to a confused deputy in startActivities of "ActivityStartController.java". A local user can gain elevated privileges on the target system.


Remediation

Install updates from vendor's website.