CVE-2023-21177

Summary

CVE-2023-21177 is a vulnerability affecting the Android operating system in its WindowManagerService. In a specific function named requestAppKeyboardShortcuts in WindowManagerService.java, there is a missing permission check. This issue allows an attacker to infer the app a user is interacting with, leading to local information disclosure. Notably, no additional execution privileges or user interaction are required for exploitation. This vulnerability, identified as A-273906410, impacts Android-13 versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.