H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2023-21237

Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.

Vulnerability
TypeVulnerability
External ID—
First seen2024-03-05
Last seen2024-03-05

Confidence

—

Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.

Labels

exploitedkev

CISA KEV context

Vendor / productAndroid Pixel
Added2024-03-05
Due date2024-03-26
60 recorded

Relationships

mitigates
from Remediate CVE-2023-21237
Mitigation
related-to
to Account Footprinting
Technique
related-to
to Active OS Fingerprinting
Technique
related-to
to Browser Fingerprinting
Technique
related-to
to DNS Zone Transfers
Technique
related-to
to Eavesdropping
Technique
related-to
to Enumerate Mail Exchange (MX) Records
Technique
related-to
to Establish Rogue Location
Technique
related-to
to Excavation
Technique
related-to
to Exploiting Trust in Client
Technique
related-to
to File Discovery
Technique
related-to
to Fingerprinting
Technique
related-to
to Footprinting
Technique
related-to
to Group Permission Footprinting
Technique
related-to
to Host Discovery
Technique
related-to
to ICMP Address Mask Request
Technique
related-to
to ICMP Echo Request Ping
Technique
related-to
to ICMP Error Message Echoing Integrity Probe
Technique
related-to
to ICMP Error Message Quoting Probe
Technique
related-to
to ICMP Information Request
Technique
related-to
to Identify Shared Files/Directories on System
Technique
related-to
to IP (DF) 'Don't Fragment Bit' Echoing Probe
Technique
related-to
to IP 'ID' Echoed Byte-Order Probe
Technique
related-to
to IP ID Sequencing Probe
Technique
related-to
to Network Topology Mapping
Technique
related-to
to Owner Footprinting
Technique
related-to
to Passive OS Fingerprinting
Technique
related-to
to Peripheral Footprinting
Technique
related-to
to Port Scanning
Technique
related-to
to Process Footprinting
Technique
related-to
to Reusing Session IDs (aka Session Replay)
Technique
related-to
to Scanning for Vulnerable Software
Technique
related-to
to Services Footprinting
Technique
related-to
to Session Credential Falsification through Prediction
Technique
related-to
to Shoulder Surfing
Technique
related-to
to Subverting Environment Variable Values
Technique
related-to
to TCP ACK Ping
Technique
related-to
to TCP ACK Scan
Technique
related-to
to TCP Congestion Control Flag (ECN) Probe
Technique
related-to
to TCP Connect Scan
Technique
related-to
to TCP FIN Scan
Technique
related-to
to TCP Initial Window Size Probe
Technique
related-to
to TCP (ISN) Counter Rate Probe
Technique
related-to
to TCP (ISN) Greatest Common Divisor Probe
Technique
related-to
to TCP (ISN) Sequence Predictability Probe
Technique
related-to
to TCP Null Scan
Technique
related-to
to TCP Options Probe
Technique
related-to
to TCP RPC Scan
Technique
related-to
to TCP 'RST' Flag Checksum Probe
Technique
related-to
to TCP Sequence Number Probe
Technique
related-to
to TCP SYN Ping
Technique
related-to
to TCP SYN Scan
Technique
related-to
to TCP Timestamp Probe
Technique
related-to
to TCP Window Scan
Technique
related-to
to TCP Xmas Scan
Technique
related-to
to Timestamp Request
Technique
related-to
to Traceroute Route Enumeration
Technique
related-to
to UDP Ping
Technique
related-to
to UDP Scan
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2023-21237
open
cwe
CWE-200
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance