CVE-2024-49742
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 276
Summary
CVE-2024-49742 is a vulnerability affecting the NotificationAccessConfirmationActivity.java in an unspecified software. This issue allows a user to potentially hide an application with notification access in the Settings menu, bypassing a required permission check. This can lead to a local privilege escalation, granting the attacker enhanced access to the system without the need for additional execution privileges. However, user interaction is necessary for an attacker to exploit this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.