CVE-2020-0099

7.8 highEPSS 0.5%

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-1188
Published: 2020-12-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://source.android.com/security/bulletin/2020-12-01
https://source.android.com/security/bulletin/2020-12-01

Check your stack JSON