Vulnerabilities > CVE-2022-20226 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 12.0/12.1

047910
CVSS 3.9 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
local
low complexity
google
CWE-1021
NVD
Published: 2022-07-13
Updated: 2022-07-26

Summary

In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213644870

Vulnerable Configurations

Part Description Count
OS
Google
2

Common Weakness Enumeration (CWE)

References