CVE-2024-43765
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 1021
Summary
CVE-2024-43765 is a newly identified vulnerability affecting multiple locations where a tapjacking/overlay attack can be exploited. This type of attack allows an attacker to gain unauthorized access to a folder, potentially resulting in local privilege escalation. However, it's important to note that user interaction is required for the exploitation to be successful. This vulnerability could pose a significant risk if left unaddressed, especially in environments where User execution privileges are commonly granted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Android