CVE-2023-20963

7.8

CVSS
High

PUBLISHED

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges...

Exploited in the wild Low complexity No user interaction

Vendor: Google
Product: Android
Published: Mar 24, 2023
EPSS: —

Description

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519

android cisa

CVSS scores

CVSS v3.1 7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2023-04-13 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: No
Technical impact: total

References

https://source.android.com/security/bulletin/2023-03-01

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	Apr 13, 2023

Vulnerability detail