CVE-2022-39913: Google Android

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attacker to access user profiles information.

Affected products

• Google Android: before 13.0 (fixed in 13.0)

Published 2022-12-08. Last modified 2026-06-17.