VULNERABILITY INTELLIGENCE

CVE-2015-3833

CVSS score4.3 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2015-10-01
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603.

Weakness classification

  • CWE-284: Improper Access Control

Primary references