VDB
CVE-2021-0586
CVE-2021-0586
PUBLISHED
Reported by google_android · Published July 14, 2021
In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-182584940
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Android | Android-11 Android-8.1 Android-9 Android-10 |
| n/a | Android | 8.1 |
Timeline
- Jul 14, 2021 CVE Published
- Jul 15, 2021 EPSS Score
- Sep 13, 2021 EPSS Score
- Nov 13, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 14, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 13, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 12, 2022 EPSS Score
- Nov 11, 2022 EPSS Score