ZeroHour

CVE-2020-22475

PoC ×2
CVSS 3.1
6.8 medium
EPSS
<1%p39
Published
()
Modified
Description

"Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions.

Vendors
tasks
Products
tasks
Weakness
CWE-276
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.