CVE-2023-40120

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-401215.5In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local iCVE-2023-401223.3In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to lCVE-2023-401235.5In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. This could CVE-2023-401245.5In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photCVE-2023-401257.8In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to locCVE-2023-401273.3In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosuCVE-2023-401287.8In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatCVE-2023-401298.8In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proCVE-2023-40136.5The GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin before 4.12.5 does not have proper CSRF checks when managing its lCVE-2023-401307.8In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to locCVE-2023-401317.0In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilegCVE-2023-401327.8In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missin