
ช่องโหว่ CVE-2023-35674 *สถานะ: ยังไม่เสร็จ*
CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions.
The vulnerability occurs in how the Android Framework handles application package cache files. An attacker can exploit this vulnerability to modify an application's cache files to execute malicious code.
The vulnerability was reported to Google on August 22, 2023, and Google released an update to patch it on August 2, 2023.
An attacker can use this vulnerability to install malware on Android devices, steal personal information, or control the device.
Additional details about CVE-2023-35674: