Lucene search
HistoryFeb 17, 2023 - 10:15 p.m.
CVE-2021-26277
cve-2021-26277
pendingintent
privileged actions
malicious application
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0.003
Percentile
70.5%
The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.
Affected configurations
Node
googleandroidRange<11.0
vivoframe_serviceRange<2021.6.30
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| vivo | frame_service | * | cpe:2.3:a:vivo:frame_service:*:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2023-02-17 22:15:00
cvelist
cvelist
cve
cve
CVE-2021-26277
2023-02-17 22:15:11
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0.003
Percentile
70.5%
Related for NVD:CVE-2021-26277