coldbraid

CVE-2023-21237 Android Pixel

Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.

CVSS
not scored

CWE-200

On CISA’s exploited list

Android Pixel Information Disclosure Vulnerability

Added
2024-03-05
Federal patch deadline
2024-03-26
Ransomware use
not known