CVE-2021-40448 Microsoft Accessibility Insights for Android Information Disclosure Vulnerability

2021-09-1511:24:27

microsoft

www.cve.org

microsoft

accessibility insights

android

information disclosure

vulnerability

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

AI Score

6.9

Confidence

High

EPSS

0.009

Percentile

82.5%

JSON

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Accessibility Insights for Android",
    "cpes": [
      "cpe:2.3:a:microsoft:accessibility_insights_for_android:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "2021.0.0",
        "lessThan": "2021.826.1",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]