CVE-2022-39912: Google Android

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder.

Affected products

• Google Android: before 13.0 (fixed in 13.0)

Published 2022-12-08. Last modified 2026-06-17.