CVE-2023-20927

In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-244216503

• CWE-284

• https://source.android.com/security/bulletin/aaos/2023-02-01Vendor Advisory
• https://source.android.com/security/bulletin/aaos/2023-02-01Vendor Advisory

Published

Feb 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20921In onPackageRemoved of AccessibilityManagerService.java, the…7.3
• CVE-2023-20922In setMimeGroup of PackageManagerService.java, there is a po…5.5
• CVE-2023-20923In exported content providers of ShannonRcs, there is a poss…5.5
• CVE-2023-20924In (TBD) of (TBD), there is a possible way to bypass the loc…6.8
• CVE-2023-20925In setUclampMinLocked of PowerSessionManager.cpp, there is a…7.8
• CVE-2023-20926In onParentVisible of HeaderPrivacyIconsController.kt, there…6.8
• CVE-2023-20928In binder_vma_close of binder.c, there is a possible use aft…7.8
• CVE-2023-20929In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, t…5.5
• CVE-2023-2093A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-20930In pushDynamicShortcut of ShortcutPackage.java, there is a p…5.5
• CVE-2023-20931In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a pos…7.8
• CVE-2023-20932In onCreatePreferences of EditInfoFragment.java, there is a …3.3