{"id":"CVE-2019-9463","aliases":["EUVD-2019-18837","GHSA-fxff-7799-p3qc"],"status":"published","title":"In Platform, there is a possible bypass of user interaction requirements due to background app...","description":"In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00173,"percentile":0.06766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-09-27T18:05:19Z","modified":"2026-06-17T02:43:46Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-10","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9463"},{"url":"https://github.com/advisories/GHSA-fxff-7799-p3qc"}],"sources":{"cve":[{"id":"CVE-2019-9463","description":"In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607","status":"published","published":"2019-09-27T18:05:19Z","modified":"2024-08-04T21:46:30.56Z","updated_at":"2026-11-02T14:20:20.081405Z"}],"euvd":[{"id":"EUVD-2019-18837","description":"In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607","status":"published","published":"2019-09-27T18:05:19Z","modified":"2024-08-04T21:46:30Z","updated_at":"2026-11-03T03:06:38.242317Z"}],"ghsa":[{"id":"GHSA-fxff-7799-p3qc","title":"In Platform, there is a possible bypass of user interaction requirements due to background app...","description":"In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607","status":"published","published":"2022-05-24T16:57:27Z","modified":"2023-01-28T05:07:43Z","updated_at":"2026-11-02T14:44:34.06652Z"}],"nvd":[{"id":"CVE-2019-9463","description":"In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607","status":"published","published":"2019-09-27T19:15:29.67Z","modified":"2026-06-17T02:43:46.43Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:30.039477Z"}]}}
