CVE-2018-9524

In functionality implemented in System UI, there are insufficient protections implemented around overlay windows

published November 14, 2018

CVSS
—
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-34170870

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00178 · 7.0th percentile
Published
2018-11-14T18:00Z
EPSS history
Timeline
  • 14 NOV 18:00Z
    In functionality implemented in System UI, there are insufficient protections implemented around overlay windows
    cvelistv5