CVE-2023-35674
HIGH KEVAndroid - Local Privilege Escalation via WindowState Logic Error
Title source: llmExploitation Summary
CVE-2023-35674 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 13, 2023. EIP tracks 2 public exploits from researchers including SpiralBL0CK, Thampakon.
AI-analyzed exploit summary The repository contains theoretical code and a guide for CVE-2023-35674, focusing on Android permission handling and presentation activities. It lacks a functional exploit but includes comments suggesting potential exploitation paths.
Description
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (2)
The repository contains theoretical code and a guide for CVE-2023-35674, focusing on Android permission handling and presentation activities. It lacks a functional exploit but includes comments suggesting potential exploitation paths.
The repository contains a README describing CVE-2023-35674, a high-severity zero-day vulnerability in the Android Framework allowing local privilege escalation via cache file manipulation. No exploit code is provided, only a detailed explanation of the vulnerability.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H