CVE-2020-0366

In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability

published September 17, 2020

CVSS
—
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app set as the default Assist app with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-138443815

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.6th percentile
Published
2020-09-17T20:47Z
EPSS history
Timeline
  • 17 SEP 20:47Z
    In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability
    cvelistv5