CVE-2023-20963
HighActively exploited (CISA KEV)
Description
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519
SeverityHigh
CVSS7.8
Exploit probability—
Product
Android Framework
PublishedMar 24, 2023
First seenMar 24, 2023
Added to KEVApr 13, 2023
Weakness typeCWE-295CWE-295
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: May 4, 2023Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google android | 11.0, 12.0, 12.1, 13.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.