Exploit / PoCcritical
StrandHogg 2.0: Critical Android flaw allows app hijacking, data theft
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-0096 | In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy | 7.8 | <1% |
From the original article
2 min read at helpnetsecurity.com
Google has released a patch for CVE-2020-0096, a critical escalation of privilege vulnerability in Android that allows attackers to hijack apps (tasks) on the victim’s device and steal data. Dubbed StrandHogg 2. 0 because its similar to the StrandHogg vulnerability exploited by hackers in late 2019, it affects all but the latest version of Android.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.