CVE-2023-21237

🔥 Known Exploited (CISA KEV)MEDIUM

5.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-06-28

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

Affected Platforms (CPE)

💻

Google

Android

= 13.0

References & Advisories

🔗 https://source.android.com/security/bulletin/pixel/2023-06-01

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21237

CVE-2023-21237

Vulnerability Description

Affected Platforms (CPE)

Android

References & Advisories

相關資安分析文章

全球网络威胁情报摘要：2026 年 7 月 20 日

相关漏洞威胁