CVE Vulnerabilities

CVE-2021-23246

Published: Mar 11, 2022 | Modified: Mar 18, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.

Affected Software

Name Vendor Start Version End Version
Coloros Oppo 11 (including) 11 (including)

References