CVE-2022-20331

CVE-2022-20331 describes a local escalation of privilege vulnerability affecting Android 13, where a malicious application can enable a work profile without user consent through a tapjacking or overlay attack. This high-severity vulnerability (CVSS 7.8) requires user interaction for exploitation, but no additional execution privileges are needed, allowing an attacker to gain significant control over the device. Despite its severity, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it shows no signs of active exploitation or significant community discussion or media coverage.