{"id":"CVE-2022-20314","aliases":["EUVD-2022-25574","GHSA-cwp7-39x8-fh23"],"status":"published","title":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input...","description":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00105,"percentile":0.01052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2022-08-11T15:24:53Z","modified":"2026-06-17T04:24:04Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-13","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20314"},{"url":"https://github.com/advisories/GHSA-cwp7-39x8-fh23"}],"sources":{"cve":[{"id":"CVE-2022-20314","description":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118","status":"published","published":"2022-08-11T15:24:53Z","modified":"2024-08-03T02:10:44.212Z","updated_at":"2026-11-02T14:34:24.971323Z"}],"euvd":[{"id":"EUVD-2022-25574","description":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118","status":"published","published":"2022-08-11T15:24:53Z","modified":"2024-08-03T02:10:44Z","updated_at":"2026-11-03T03:25:54.957993Z"}],"ghsa":[{"id":"GHSA-cwp7-39x8-fh23","title":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input...","description":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118","status":"published","published":"2022-08-13T00:00:44Z","modified":"2023-01-27T05:05:44Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:42:45.476861Z"}],"nvd":[{"id":"CVE-2022-20314","description":"In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118","status":"published","published":"2022-08-12T15:15:12.083Z","modified":"2026-06-17T04:24:04.3Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:24.750124Z"}]}}