[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-21094":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":27,"references":29,"score":31,"epss_score":32,"epss_percentile":33,"is_kev":19,"cisa_kev_date_added":34,"cisa_kev_due_date":34,"cisa_ssvc":35,"attack_mappings":45,"exploits":76},330791,"CVE-2023-21094","EUVD-2023-25262","In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-248031255","2023-04-19T20:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-862",[23,24,25,26],"cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*","cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*","cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*","cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",[28],"Google Android",[30],"https:\u002F\u002Fsource.android.com\u002Fsecurity\u002Fbulletin\u002F2023-04-01",0.39,0.00162,0.05076,null,{"timestamp":36,"automatable":37,"tech_impact":38,"exploitation":39,"cisa_decision":40,"cisa_remediation_timeline":44},"2025-02-05T15:37:20.889377Z","no","total","none",{"vector":41,"decision":42,"priority":43},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T13:39:50.141006\u002F","track_star","medium","14D",[46,52,61,68],{"name":47,"source":48,"tactics":49,"technique_id":51},"Exploitation for Privilege Escalation","attack_vector",[50],"privilege-escalation","T1068",{"name":53,"source":54,"cwe_ids":55,"tactics":56,"capec_ids":58,"technique_id":60},"Exploitation for Stealth","capec",[21],[57],"stealth",[59],"CAPEC-665","T1211",{"name":62,"source":54,"cwe_ids":63,"tactics":64,"capec_ids":66,"technique_id":67},"Component Firmware",[21],[65,57],"persistence",[59],"T1542.002",{"name":69,"source":54,"cwe_ids":70,"tactics":71,"capec_ids":74,"technique_id":75},"Modify Authentication Process",[21],[72,73,65],"credential-access","defense-impairment",[59],"T1556",[]]