High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-06-11	CVE-2021-0498	Double Free vulnerability in Google Android In memory management driver, there is a possible memory corruption due to a double free. local low complexity google CWE-415	7.8
2021-06-11	CVE-2021-25388	Improper Validation of Integrity Check Value vulnerability in Google Android 11.0 Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app. local low complexity google CWE-354	7.1
2021-06-11	CVE-2021-25407	Out-of-bounds Write vulnerability in Google Android 10.0/11.0/9.0 A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write. local low complexity google CWE-787	7.8
2021-06-11	CVE-2021-25408	Classic Buffer Overflow vulnerability in Google Android 10.0/11.0/9.0 A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution. local low complexity google CWE-120	7.8
2021-06-11	CVE-2021-25410	Incorrect Authorization vulnerability in Google Android 11.0 Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege. local low complexity google CWE-863	7.1
2021-06-11	CVE-2021-25412	Unspecified vulnerability in Google Android 10.0 An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected activity with system privilege via untrusted applications. local low complexity google	7.8
2021-06-11	CVE-2021-25414	Unspecified vulnerability in Google Android 10.0/11.0/9.0 Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with Samsung Contacts privilege. local low complexity google	7.8
2021-06-11	CVE-2021-25417	Unspecified vulnerability in Google Android 10.0/9.0 Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage. network low complexity google	7.5
2021-04-13	CVE-2021-0446	Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 11.0 In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. local low complexity google CWE-1021	7.3
2021-04-13	CVE-2021-0445	Unspecified vulnerability in Google Android 11.0/9.0 In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. local low complexity google	7.8