CVE-2018-9458
published 2018-11-06CVE-2018-9458: In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong…
PriorityP336high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.57%
43.8th percentile
In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-71786287.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| google_inc | android | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2018-9458: Android Security Bulletin 2018-08-01
CVE: CVE-2018-9458
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
vendor_android·2018-08-01·CVSS 7.8
CVE-2018-9458 [HIGH] CVE-2018-9458: Android Security Bulletin 2018-08-01
CVE: CVE-2018-9458
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
Android Security Bulletin 2018-08-01
CVE: CVE-2018-9458
Severity: HIGH
Type: EoP
Affected AOSP versions: 8.0, 8.1
References: A-71786287
GHSA
GHSA-q9q7-mvqx-8v66: In computeFocusedWindow of RootWindowContainer
ghsa_unreviewed·2022-05-13
CVE-2018-9458 [HIGH] CWE-1021 GHSA-q9q7-mvqx-8v66: In computeFocusedWindow of RootWindowContainer
In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android ID: A-71786287.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-11-06
Published