Vulnerability Details : CVE-2015-3865
The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23050463.
Published
2015-10-06 17:59:04
Updated
2015-10-07 14:31:17
Exploit prediction scoring system (EPSS) score for CVE-2015-3865
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 21 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2015-3865
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2015-3865
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-3865
Products affected by CVE-2015-3865
- cpe:2.3:o:google:android:*:*:*:*:*:*:*:*