CVE-2022-20226

In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation

published July 13, 2022

CVSS
—
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213644870

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00100 · 0.8th percentile
Published
2022-07-13T18:23Z
EPSS history
Timeline
  • 13 JUL 18:23Z
    In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation
    cvelistv5