{"cvss":7.8,"datePublished":"2023-04-13","dateUpdated":"2023-04-13","description":"Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.","dueDate":"2023-05-04","id":"CVE-2023-20963","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://source.android.com/docs/security/bulletin/2023-03-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-20963","product":"Framework","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Android Framework Privilege Escalation Vulnerability","vendor":"Android"}