CVE-2022-20214

4.7 mediumEPSS 0.2%

Medium (4.7) in google android. EPSS 0.2% chance of exploitation in the next 30 days.

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2023-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://source.android.com/security/bulletin/aaos/2023-01-01
https://source.android.com/security/bulletin/aaos/2023-01-01

Check your stack JSON