EXPOSURES › CVE-2021-0920
CVE-2021-0920
HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 75/100
exploited-in-wildunpatchedprivilege-escalationrce
Android kernel race condition allows privilege escalation via use-after-free.
A race condition in the Android kernel enables use-after-free leading to privilege escalation. DIBs must patch Android devices promptly as this was actively exploited in the wild. Failure to patch exposes systems to arbitrary code execution and data compromise.
Shame score — Actively exploited in the wild with privilege escalation, indicating negligent patching and avoidable exposure.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.