In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS
No CVSS.
References
Configurations
No configuration.
History
17 Jan 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-17 23:15
Updated : 2025-01-17 23:15
NVD link : CVE-2018-9375
Mitre link : CVE-2018-9375
CVE.ORG link : CVE-2018-9375
JSON object : View
Products Affected
No product.
CWE
No CWE.