CVE-2023-21374

Summary

CVE-2023-21374 is a newly identified vulnerability affecting the System UI component. This issue involves a logic error in the factory reset protection code, enabling an attacker to bypass this security feature. The exploitation does not require any user interaction or additional execution privileges, making it a local privilege escalation vulnerability. Successful exploitation could allow an attacker to gain elevated system access. The System UI component is a crucial part of the Android operating system, making this a significant finding for mobile security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.