CVE-2020-0096

CVSS 3.1: 7.8 high
EPSS: <1%p47
Published: May 14, 2020 · May 14, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-0096 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109

Vendors: google

Products: android

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

4 stories

Week in review: Windows RDP backdoor, GDPR enforcement, application threats and security trends

Help Net SecurityMay 31, 00:00 UTC · May 31, 2020MalwareCVE-2020-0096 CVE-2019-101493

StrandHogg 2.0: Critical Android flaw allows app hijacking, data theft

Help Net SecurityMay 28, 00:00 UTC · May 28, 2020Exploit / PoCCVE-2020-00962

StrandHogg 2.0 Android flaw affects over 1 Billion devices

Security AffairsMay 26, 20:57 UTC · May 26, 2020Exploit / PoCCVE-2020-00962 · 1 read

New Android Flaw Affecting Over 1 Billion Phones Let Attackers Hijack Apps

The Hacker NewsMay 26, 14:40 UTC · May 26, 2020VulnerabilityCVE-2020-00962 · 1 read