CVE-2023-21329

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 30, 2023
Updated: Nov 7, 2023
CWE ID 862

Summary

CVE-2023-21329 is a vulnerability affecting the Activity Manager component of certain operating systems. This issue arises due to a missing permission check, enabling an attacker to determine if a specific app is installed without requiring elevated privileges or user interaction. The disclosure of this information could potentially be used for malicious purposes, however, it does not grant the attacker the ability to execute code or modify the targeted system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share