CVE-2023-21284

Summary

CVE-2023-21284 is a vulnerability affecting multiple functions in DevicePolicyManager.java. The issue lies in improper input validation, allowing an attacker to prevent the enabling of the Find my Device feature. This local denial of service requires User execution privileges and does not necessitate user interaction for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.