VDB
CVE-2022-20214
CVE-2022-20214
PUBLISHED
CVSS 4.699999809265137 MEDIUM
In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210
EPSS 0.23% · 13.6th percentile
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
0.23%
13.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 10.0, 11.0, 12.0 | |
| n/a | Android | * |
Timeline
- Jan 24, 2023 CVE Published
- Jan 25, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 16, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 6, 2023 EPSS Score
- Aug 16, 2023 EPSS Score
- Sep 26, 2023 EPSS Score
- Nov 5, 2023 EPSS Score
- Dec 16, 2023 EPSS Score
- Jan 25, 2024 EPSS Score
- Mar 6, 2024 EPSS Score