Security Advisory

CVE-2018-9469

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-11-20 16:53:36

Last updated 2024-11-20 19:08:05

Assigner google_android

CVSS score not scored

State PUBLISHED

Description

In multiple functions of ShortcutService.java, there is a possible creation of a spoofed shortcut due to a missing permission check. This could lead to local escalation of privilege in a privileged app with no additional execution privileges needed. User interaction is needed for exploitation.

← Browse all CVEs View on cve.org ↗