CVE-2022-20262

CVE-2022-20262 is a local information disclosure vulnerability affecting Android 13, stemming from a missing permission check in ActivityManager. An attacker with user execution privileges could exploit this to check another process's capabilities without user interaction. This vulnerability has a low CVSS score of 3.3, indicating low attack complexity and local access requirements, with a potential impact of information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.