CVE-2023-21319
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Oct 30, 2023
Updated: Nov 6, 2023
CWE ID 203
Summary
CVE-2023-21319 is a new vulnerability affecting UsageStatsService. This issue allows an attacker to potentially view information about installed third-party apps through side channel data disclosure. Notably, no additional execution privileges or user interaction are required for exploitation. This vulnerability could result in local information disclosure, posing a privacy risk to affected users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android