CVE-2023-40095

Summary

CVE-2023-40095 is a vulnerability affecting the createDontSendToRestrictedAppsBundle function in PendingIntentUtils.java. This issue involves a missing check in the background activity launch process, which could allow an attacker to escalate privileges locally. Notably, no additional execution privileges are required for exploitation, and user interaction is not needed. This vulnerability poses a significant risk and should be addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.