← Volver a CVEs
CVE-2018-9524
N/ADescripcion
In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-34170870
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado11/14/2018
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
google:android
Debilidades (CWE)
CWE-1021
Referencias
http://www.securityfocus.com/bid/105848(security@android.com)
https://source.android.com/security/bulletin/2018-11-01(security@android.com)
http://www.securityfocus.com/bid/105848(af854a3a-2127-422b-91ae-364da2661108)
https://source.android.com/security/bulletin/2018-11-01(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.