Patch days / October 2021

Android Security Bulletin — October 2021

Monday, 4 October 2021

Vulnerabilities: 20
Critical: 0
High: 0
Zero-days: 0
Public exploit: 3

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Unscored
CVE-2021-0595 Public exploit In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could le…
Unscored
CVE-2021-0683 Public exploit In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalat…
Unscored
CVE-2021-0688 Public exploit In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with Us…

All vulnerabilities 20

Unscored20 Show