How severe is CVE-2023-21189?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.3 out of 10.

What type of vulnerability is CVE-2023-21189?

This is classified as CWE-667, which is a common weakness in software security.

CVE-2023-21189 - HIGH Severity | CVSS 7.3

Vulnerability Description

In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-213942596

Related Vulnerabilities

CVE-2019-6321

HIGH

CVSS:7.2(High)

HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates ...

CWE-6672019

CVE-2002-1850

HIGH

CVSS:7.5(High)

mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data t...

CWE-6672002

CVE-2004-0174

HIGH

CVSS:7.5(High)

Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "s...

CWE-6672004

CVE-2006-2275

HIGH

CVSS:7.5(High)

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickl...

CWE-6672006

CVE-2006-5158

HIGH

CVSS:7.5(High)

The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified ve...

CWE-6672006

CVE-2009-2699

HIGH

CVSS:7.5(High)

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products,...

CWE-6672009