All CVE records

CVE-2023-20963 — Android Framework Privilege Escalation Vulnerability

CISA KEV listed Added April 13, 2023 Remediate by May 4, 2023

Description

Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.

Required action

Apply updates per vendor instructions.

Notes

https://source.android.com/docs/security/bulletin/2023-03-01; https://nvd.nist.gov/vuln/detail/CVE-2023-20963

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer