coldbraid

CVE-2023-20963 Android Framework

Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.

CVSS
not scored

CWE-295

On CISA’s exploited list

Android Framework Privilege Escalation Vulnerability

Added
2023-04-13
Federal patch deadline
2023-05-04
Ransomware use
not known