CVE Watch—

CVE-2023-21237

Android Pixel Information Disclosure Vulnerability

CVSS

—

No CVSS

EPSS

0.3%

p17

KEV

YES

Mar 5, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-09-172026-10-15

KEV catalog record

Product

Android / Pixel

Vulnerability

Android Pixel Information Disclosure Vulnerability

Added to KEV

Mar 5, 2024

Remediate by

Mar 26, 2024

Known ransomware use

Summary description

Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://source.android.com/docs/security/bulletin/pixel/2023-06-01; https://nvd.nist.gov/vuln/detail/CVE-2023-21237

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-32896—

87.1%

KEV—76Android Pixel Privilege Escalation Vulnerability—CVE-2024-29748—

51.2%

KEV—65Android Pixel Privilege Escalation Vulnerability—CVE-2024-29745—

40.4%

KEV—62Android Pixel Information Disclosure Vulnerability—