7.3high
CVE-2019-9463
In Platform, there is a possible bypass of user interaction requirements due to background app interception.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
7.3
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 7%
Public exploits
0
none known
Summary
In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607
Exploit prediction (EPSS)
0.17% probability of exploitation in the next 30 days, higher than 7% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- n/a Android
References
- source.android.com /security/bulletin/android-10 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2019-9463
- NVD: CVE-2019-9463
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.