Android Issues Patches for 4 New Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-2215 | Use-After-Free Privilege Escalation in Android Kernel (CVE-2019-2215) | 7.8 | 72% | KEVPoC ×2 | KEV |
| CVE-2020-11261 | Local Privilege Escalation via Memory Corruption in Qualcomm Snapdragon Chipsets | 7.8 | 2% | KEV | KEV |
CVE-2021-1905+1 related CVE | Use-After-Free in Qualcomm Snapdragon Chipsets Allows Local Privilege Escalation | 7.8 group max | 2% | KEV | KEV |
CVE-2021-28663+1 related CVE | Use-After-Free Privilege Escalation in Arm Mali GPU Kernel Driver | 8.8 | 12% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days. "There are indications that CVE-2021-1905, CVE-2021-1906, CVE-2021-28663 and CVE-2021-28664 may be under limited, targeted exploitation," the search giant said in an updated alert.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.