[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC_K4i20RAqlpif-qBMlEsXnMhAUfkztyJkDJ2fRf5sE":3,"g5a-risk:CVE-2023-35674":138},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":58,"references":59,"referencesCount":80,"weaknesses":81,"weaknessesCount":90,"isActivelyExploited":4,"cisaInfo":91,"otxData":26,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":133,"notableEvents":134},"CVE-2023-35674","What is CVE-2023-35674?","In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalatio...","2023-09-11T21:15:42.193","2025-10-23T14:52:35.807",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":37},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":34,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",8.8,2,6,[],[],0.02636,[40,40,40,40,40,40,40],"High",[44,49,52,55],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"google","android","11.0","cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"12.0","cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"12.1","cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":56,"criteria":57,"vulnerable":4},"13.0","cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",4,[60,65,70,72,74],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fandroid.googlesource.com\u002Fplatform\u002Fframeworks\u002Fbase\u002F+\u002F7428962d3b064ce1122809d87af65099d1129c9e","Googlesource",[64],"Patch",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fsource.android.com\u002Fsecurity\u002Fbulletin\u002F2023-09-01","Android",[64,69],"Vendor Advisory",{"url":61,"source":62,"tags":71},[64],{"url":66,"source":67,"tags":73},[64,69],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35674","CISA",[78,79],"Third Party Advisory","US Government Resource",5,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",1,{"shortDescription":86,"requiredAction":86,"vulnerabilityName":86,"dateAdded":26},[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2023-35674? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-35674, a high severity cyber security vulnerability from 2023. In onCreate of WindowState.java, there is a possible way to...","CVE-2023-35674, CVE-2023-35674 vulnerability, CVE-2023-35674 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, google security, android vulnerability","\u002Fwhat-is\u002Fcve-2023-35674",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-35674","Cybersecurity","CVE-2023-35674, CVE-2023-35674 vulnerability, CVE-2023-35674 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":122,"Negate":123,"CPEMatch":124},"OR",false,[125,127,129,131],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"109DD7FD-3A48-4C3D-8E1A-4433B98E1E64",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F8FB8EE9-FC56-4D5E-AE55-A5967634740C",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C64C1583-CDE0-4C1F-BDE6-05643C1BDD72",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"879FFD0C-9B38-4CAA-B057-1086D794D469",[],[],{"lastModified":11,"cacheTime":136,"version":137},1793204404391,"2.0",{"score":139,"band":42,"action":140,"scoredAt":141},75,"Emergency patch","2026-10-28T06:58:40.977179+00:00"]