CVE-2023-21341

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Oct 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-213427.8In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background CVE-2023-213437.8In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to local escalation of prCVE-2023-213445.5In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatiCVE-2023-213453.3In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inCVE-2023-213463.3In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side chanCVE-2023-213477.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2023-213483.3In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatCVE-2023-213493.3In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaCVE-2023-21357.5Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconCVE-2023-213505.5In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informCVE-2023-213517.8In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation CVE-2023-213525.5In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi
CVE-2023-21341: High severity, CVSS 7.8 | Vulnix