{"id":83991,"date":"2025-10-22T08:23:55","date_gmt":"2025-10-22T08:23:55","guid":{"rendered":""},"modified":"2025-10-25T05:38:59","modified_gmt":"2025-10-25T11:38:59","slug":"cve-2025-0080-tapjacking-overlay-attack-leads-to-local-escalation-of-privilege","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-0080-tapjacking-overlay-attack-leads-to-local-escalation-of-privilege\/","title":{"rendered":"CVE-2025-0080: Tapjacking\/Overlay Attack Leads to Local Escalation of Privilege<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-0080 is a significant cybersecurity vulnerability that exploits an overlay attack to compromise system security. The affected systems are susceptible to local escalation of privilege without requiring additional execution privileges. This vulnerability is particularly critical<\/a> because it does not necessitate user interaction for exploitation. Therefore, every entity that relies on the affected systems should prioritize its mitigation to avoid a potential<\/a> system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-0080
\nSeverity: High (7.8 CVSS Score)
\nAttack Vector: Local
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Local Escalation of Privilege leading to potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n