VDB
CVE-2021-39773
CVE-2021-39773
PUBLISHED
CVSS 5.5 MEDIUM
In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-191276656
EPSS 0.11% · 1.4th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.11%
1.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Android | Android-12L |
| android | 12.0 |
Timeline
- Mar 30, 2022 CVE Published
- Mar 31, 2022 EPSS Score
- Apr 6, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 11, 2022 EPSS Score
- Aug 31, 2022 EPSS Score
- Oct 21, 2022 EPSS Score
- Dec 11, 2022 EPSS Score
- Jan 31, 2023 EPSS Score
- Mar 22, 2023 EPSS Score
- May 12, 2023 EPSS Score
- Jul 2, 2023 EPSS Score