A T H E X BLACK HAT

2 exploits Active since Mar 2024
CVE-2024-0044 NOMISEC MEDIUM WORKING POC
PackageInstallerService - Privilege Escalation
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
5 stars
CVSS 6.7
CVE-2024-0044 NOMISEC MEDIUM WORKING POC
PackageInstallerService - Privilege Escalation
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
4 stars
CVSS 6.7