CVE-2021-0334

7.8 highEPSS 0.3%

High (7.8) in google android. EPSS 0.3% chance of exploitation in the next 30 days.

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2021-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://source.android.com/security/bulletin/2021-02-01
https://source.android.com/security/bulletin/2021-02-01

Check your stack JSON