Lucene search
Google_androidCVELIST:CVE-2021-0705HistoryOct 22, 2021 - 1:27 p.m.
CVE-2021-0705
2021-10-2213:27:22
google_android
www.cve.org
8
sanitizesbn
service running
background service restrictions
local escalation
android-11
android-10
cve-2021-0705
notificationmanagerservice
EPSS
0
Percentile
5.1%
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-185388103
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-11 Android-10"
}
]
}
]Related
cnvd
cnvd
Google Android Elevation of Privilege Vulnerability (CNVD-2021-80275)
2021-10-08 00:00:00
osv
osv
nvd
nvd
CVE-2021-0705
2021-10-22 14:15:08
cve
cve
CVE-2021-0705
2021-10-22 14:15:08
prion
prion
Design/Logic Flaw
2021-10-22 14:15:00
androidsecurity
androidsecurity
Android Security Bulletin—October 2021
2021-10-04 00:00:00