CVE-2019-2026

In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check

published April 19, 2019

CVSS
—
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local escalation of privilege and FRP bypass with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0Android ID: A-120866126

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Published
2019-04-19T19:15Z
EPSS history
Timeline
  • 19 APR 19:15Z
    In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check
    cvelistv5