CVE Watch—

CVE-2023-20963

Android Framework Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

1.5%

p73

KEV

YES

Apr 13, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

1.5%EPSS · 30 days1.5%

2026-09-172026-10-15

KEV catalog record

Product

Android / Framework

Vulnerability

Android Framework Privilege Escalation Vulnerability

Added to KEV

Apr 13, 2023

Remediate by

May 4, 2023

Known ransomware use

Summary description

Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.

Required action

Apply updates per vendor instructions.

Notes

https://source.android.com/docs/security/bulletin/2023-03-01; https://nvd.nist.gov/vuln/detail/CVE-2023-20963

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-485958.4 HIG

77.0%

KEV—73Android Framework Integer Overflow Vulnerability86d CVE-2025-486335.5 MED

16.8%

KEV—55Android Framework Information Disclosure Vulnerability9d CVE-2025-485727.8 HIG

16.4%

KEV—55Android Framework Privilege Escalation Vulnerability9d CVE-2023-35674—

85.2%

KEV—76Android Framework Privilege Escalation Vulnerability—CVE-2024-43093—

52.5%

KEV—66Android Framework Privilege Escalation Vulnerability—