Platform Packages Apps Quicksearchbox vulnerabilities

1 known vulnerability affecting platform/packages_apps_quicksearchbox.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

UNKNOWN1

Vulnerabilities

Page 1 of 1

CVE-2021-0953UNKNOWN≥ 9:0, < 9:2021-12-01≥ 10:0, < 10:2021-12-01+2 more2021-12-01

CVE-2021-0953 CVE-2021-0953: In setOnClickActivityIntent of SearchWidgetProvider In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.