Local Escalation of Privilege in Android's Account Manager Service
CVE-2023-45777
Key Information:
Badges
What is CVE-2023-45777?
A vulnerability in the AccountManagerService of Android allows for the potential launching of arbitrary activities through system privileges due to a Parcel Mismatch. This flaw can lead to local privilege escalation without requiring any additional execution privileges or user interaction, exposing devices to unexpected behaviors and security risks. It emphasizes the need for prompt updates to mitigate potential threats.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Android 14
Android 13
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved