CVE-2021-1048

Android kernel use-after-free vulnerability allows privilege escalation and is actively exploited in the wild.

A use-after-free flaw in the Android kernel enables attackers to escalate privileges, and it is listed in CISA's KEV catalog as actively exploited. DIB organizations must ensure all Android-based devices and systems are patched immediately to prevent unauthorized access and maintain compliance with NIST 800-171 requirements for vulnerability management.

Shame score — The vulnerability is actively exploited in the wild and allows privilege escalation, indicating a severe and avoidable failure in patch management and security hygiene.