Vulnerabilities > CVE-2022-30727 - Improper Handling of Exceptional Conditions vulnerability in Google Android 10.0/11.0/12.0

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
local
low complexity
google
CWE-755
NVD
Published: 2022-06-07
Updated: 2022-06-11

Summary

Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value in work space.

Vulnerable Configurations

Part Description Count
OS
Google
3

Common Weakness Enumeration (CWE)

References