CVE-2023-28153

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-05-29 · updated 2026-06-17

Description

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.

Affected products

Kiddoware: before 3.8.50 — fixed in 3.8.50

How to fix

Upgrade to a fixed version: Kiddoware 3.8.50. Check the vendor advisory for mitigations.

References

https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-kiddoware-kids-place-parental-control-android-app/
https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-kiddoware-kids-place-parental-control-android-app/

Get alerted when CVE-2023-28153 or the next vulnerability affects your stack