VDB

CVE-2021-0534

CVE-2021-0534 PUBLISHED CVSS 7.800000190734863 HIGH

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170639543

EPSS 0.02% · 3.3th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.02%
3.3th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid-11
googleandroid11.0

Timeline

  • Jun 8, 2021 CVE Published
  • Jun 22, 2021 EPSS Score
  • Aug 21, 2021 EPSS Score
  • Oct 21, 2021 EPSS Score
  • Dec 20, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 19, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 20, 2022 EPSS Score
  • Jun 19, 2022 EPSS Score
  • Aug 20, 2022 EPSS Score
  • Oct 19, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›