Vulnerabilities > CVE-2020-0096 - Unspecified vulnerability in Google Android 8.0/8.1/9.0
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 3 |
The Hacker News
| id | THN:4436EED79F076D56D86BA561C013680B |
| last seen | 2020-05-26 |
| modified | 2020-05-26 |
| published | 2020-05-26 |
| reporter | The Hacker News |
| source | https://thehackernews.com/2020/05/stranhogg-android-vulnerability.html |
| title | New Android Flaw Affecting Over 1 Billion Phones Let Attackers Hijack Apps |