VDB
CVE-2021-39764
CVE-2021-39764
PUBLISHED
CVSS 7.800000190734863 HIGH
In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995
EPSS 0.33% · 26.2th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.33%
26.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 12.1 | |
| n/a | Android | Android-12L |
Timeline
- Mar 30, 2022 CVE Published
- Mar 31, 2022 EPSS Score
- Apr 6, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 11, 2022 EPSS Score
- Sep 1, 2022 EPSS Score
- Oct 22, 2022 EPSS Score
- Dec 12, 2022 EPSS Score
- Feb 1, 2023 EPSS Score
- Mar 24, 2023 EPSS Score
- May 14, 2023 EPSS Score
- Jul 4, 2023 EPSS Score