VDB
CVE-2022-20011
CVE-2022-20011
PUBLISHED
CVSS 5.5 MEDIUM
In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-214999128
EPSS 0.05% · 17.0th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.05%
17.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Android | Android-10 Android-11 Android-12 Android-12L |
| android | 11.0, 12.1, 10.0 |
Exploit Intelligence
Timeline
- May 3, 2022 CVE Published
- May 11, 2022 EPSS Score
- May 17, 2022 EPSS Score
- Jun 29, 2022 EPSS Score
- Aug 19, 2022 EPSS Score
- Oct 7, 2022 EPSS Score
- Nov 25, 2022 EPSS Score
- Jan 13, 2023 EPSS Score
- Mar 4, 2023 EPSS Score
- Apr 22, 2023 EPSS Score
- Jun 10, 2023 EPSS Score
- Jul 29, 2023 EPSS Score