CVE-2023-35674
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Sep 11, 2023
Updated: Dec 20, 2024
CWE ID 269
Summary
CVE-2023-35674 is a new locally exploitable vulnerability affecting the WindowState.java file in an unspecified software. The issue lies within the onCreate method, where a logic error allows for the launching of a background activity. This error can result in local privilege escalation, granting attackers elevated system access without requiring additional execution privileges. Notably, user interaction is not a prerequisite for exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android