CVE-2021-39787: Critical severity android vulnerability
Published Mar 30, 2022
·Updated
In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202506934
Affected Software
1 affected component
Google Android=12.0
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-39787?
CVE-2021-39787 has a high severity rating due to the potential for local escalation of privilege.
2
How do I fix CVE-2021-39787?
To fix CVE-2021-39787, update your Android device to the latest security patch provided by Google.
3
Who is affected by CVE-2021-39787?
CVE-2021-39787 affects users of Android 12 and Android 12L.
4
What impact does CVE-2021-39787 have?
CVE-2021-39787 could allow a malicious app to launch arbitrary activities, leading to privilege escalation.
5
Is user interaction required for exploiting CVE-2021-39787?
Yes, user interaction is needed for the exploitation of CVE-2021-39787.