2 matches found
CVE-2021-1000
In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
7.8CVSS7.2AI score0.00105EPSS
SaveExploits0References1
CVE-2021-1000: Incorrect Default Permissions
In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
7.8CVSS7.4AI score0.00105EPSS
SaveExploits0References2
20