2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39775 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In People, there is a possible way to determine whether an app is installed, without query permissions, due to side chan... |
| CVE-2021-39774 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of s... |
| CVE-2021-39773 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosur... |
| CVE-2021-39772 | HIGH | 8.8 | 0.2% | Mar 30, 2022 | In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This co... |
| CVE-2021-39771 | HIGH | 7.8 | 0.3% | Mar 30, 2022 | In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validat... |
| CVE-2021-39770 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could l... |
| CVE-2021-39769 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a ... |
| CVE-2021-39768 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing per... |
| CVE-2021-39767 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In miniadb, there is a possible way to get read/write access to recovery system properties due to an insecure default va... |
| CVE-2021-39766 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side ch... |
| CVE-2021-39765 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclos... |
| CVE-2021-39764 | HIGH | 7.8 | 0.3% | Mar 30, 2022 | In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead ... |
| CVE-2021-39763 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to l... |
| CVE-2021-39762 | HIGH | 7.5 | 0.7% | Mar 30, 2022 | In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information dis... |
| CVE-2021-39761 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side chann... |
| CVE-2021-39760 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to sid... |
| CVE-2021-39759 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalati... |
| CVE-2021-39758 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission... |
| CVE-2021-39757 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local ... |
| CVE-2021-39756 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side c... |
| CVE-2021-39755 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query per... |
| CVE-2021-39754 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side... |
| CVE-2021-39753 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In DomainVerificationService, there is a possible way to access app domain verification information due to a missing per... |
| CVE-2021-39752 | HIGH | 7.8 | 0.1% | Mar 30, 2022 | In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local esca... |
| CVE-2021-39751 | MEDIUM | 5.5 | 0.1% | Mar 30, 2022 | In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permissi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now