CVE-2024-40676: High severity android vulnerability
In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40676?
CVE-2024-40676 has a high severity rating due to its potential for local privilege escalation.
How do I fix CVE-2024-40676?
To fix CVE-2024-40676, update your Android device to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2024-40676?
CVE-2024-40676 affects Android versions 12.0, 12.1, 13.0, 14.0, and 15.0.
Can CVE-2024-40676 be exploited without user interaction?
Yes, CVE-2024-40676 can be exploited without any user interaction, making it a significant risk.
What type of vulnerability is CVE-2024-40676?
CVE-2024-40676 is a vulnerability that allows for a possible bypass of intent security checks, leading to local privilege escalation.