CVE-2023-21145

Summary

CVE-2023-21145 is a vulnerability affecting the updatePictureInPictureMode function in ActivityRecord.java. This issue involves a logic error that allows for a bypass of background launch restrictions. The consequence of this vulnerability is local privilege escalation, which can be exploited without requiring additional execution privileges or user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.