CVE-2024-40676

Summary

CVE-2024-40676 is a vulnerability affecting the AccountManagerService.java in Android's AccountManager. In the function "checkKeyIntent", there's a confused deputy issue that allows an attacker to bypass intent security checks, enabling the installation of unauthorized apps. No additional execution privileges are required for exploitation, making this a local escalation of privilege vulnerability. User interaction is not necessary for an attacker to exploit this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.