Unknown · Notification.Java · CVE-2023-21244
**Name of the Vulnerable Software and Affected Versions**
Notification.java (affected versions not specified)
**Description**
The issue is related to a missing permission check in the `visitUris` method of `Notification.java`, which could allow a bypass of user profile boundaries. This might lead to local escalation of privilege, requiring User execution privileges. No user interaction is needed for exploitation.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.