CVE-2023-40089

Summary

CVE-2023-40089 is a vulnerability affecting the getCredentialManagerPolicy function in DevicePolicyManagerService.java. This issue permits users to choose credential managers without proper authorization checks, leading to a local privilege escalation. No additional execution privileges are necessary for exploitation, making this a significant security concern. Despite user interaction not being needed to exploit the vulnerability, it poses a risk to system security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.