Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.3

Android WindowManager can let apps trick users into higher privileges

CVE-2021-39691 · published 4 years ago
Summary

The Android WindowManager component may use an incorrect setting that allows a malicious app to overlay hidden buttons and capture user taps. This can let the app gain higher system rights without additional permissions, though a user must interact with the device. Updating the Android system or applying the vendor’s patch will resolve the issue.

What to do
  • Update google platform/frameworks/base to version 12L-next:2022-06-01.
  • Update google platform/packages/modules/permission to version 12L-next:2022-06-01.
  • Update google platform/frameworks/native to version 10:2022-06-01.
  • Update google platform/frameworks/base to version 11:2022-06-01.
  • Update google platform/frameworks/native to version 11:2022-06-01.
  • Update google platform/packages/apps/launcher3 to version 11:2022-06-01.
  • Update google platform/frameworks/base to version 12:2022-06-01.
  • Update google platform/packages/apps/launcher3 to version 12:2022-06-01.
Affected software
Ecosystem VendorProductAffected versions
Android google platform/frameworks/base >= 12L-next:0, < 12L-next:2022-06-01
>= 11:0, < 11:2022-06-01
>= 12:0, < 12:2022-06-01
Fix: upgrade to 12L-next:2022-06-01
Android google platform/packages/modules/permission >= 12L-next:0, < 12L-next:2022-06-01
Fix: upgrade to 12L-next:2022-06-01
Android google platform/frameworks/native >= 10:0, < 10:2022-06-01
>= 11:0, < 11:2022-06-01
Fix: upgrade to 10:2022-06-01
Android google platform/packages/apps/launcher3 >= 11:0, < 11:2022-06-01
>= 12:0, < 12:2022-06-01
Fix: upgrade to 11:2022-06-01
– google android 10.0
11.0
12.0
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
Original advisory text
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution pri...
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
References
Severity
7.3 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-1021Improper Restriction of Rendered UI Layers or Frames
Timeline
Published1 Jun 2022
Updated4 Nov 2026
First seen3 Sep 2026
Sources
ASB-A-157929241 · OSV
CVE-2021-39691 · NVD
Track software like this
Free during beta