CVE-2023-21246

Summary

CVE-2023-21246 is a vulnerability affecting ShortcutInfo.java in the ShortcutInfo class. It permits an app to maintain notification listening access due to an uncaught exception, which can result in a local privilege escalation without requiring additional execution privileges. This exploit is triggered without user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.