CVE-2022-20214

—

CVSS 3.1

4.7 medium

EPSS

<1%p13

Published

Jan 26, 2023 (Jan 26, 2023)

Modified

Jun 17, 2026

Description

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Vendors: google
Products: android
Weakness: CWE-1021
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.