Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39790 State: PUBLISHED Published: 2022-03-30T16:02:56 Last Updated: 2024-08-04T02:20:33.404Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-186405146 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-12l
CVE ID: CVE-2021-39791 State: PUBLISHED Published: 2022-03-30T16:02:57 Last Updated: 2024-08-04T02:20:33.383Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194112606 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-12l
CVE ID: CVE-2021-39792 State: PUBLISHED Published: 2022-03-16T14:04:03 Last Updated: 2024-08-04T02:20:33.243Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-161010552References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-03-01
CVE ID: CVE-2021-39793 State: PUBLISHED Published: 2022-03-16T14:04:04.000Z Last Updated: 2025-10-21T23:15:44.355Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2022-03-01
CVE ID: CVE-2021-39794 State: PUBLISHED Published: 2022-04-12T16:11:39 Last Updated: 2024-08-04T02:20:32.967Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-205836329 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/
205836329 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39795 State: REJECTED Published: 2022-04-12T16:11:40 Last Updated: 2022-06-07T19:37:00 Description: No description available.
CVE ID: CVE-2021-39796 State: PUBLISHED Published: 2022-04-12T16:11:41 Last Updated: 2024-08-04T02:20:33.345Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205595291 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-0
Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39797 State: PUBLISHED Published: 2022-04-12T16:11:41 Last Updated: 2024-08-04T02:20:33.173Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-209607104 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39798 State: PUBLISHED Published: 2022-04-12T16:11:42 Last Updated: 2024-08-04T02:20:33.026Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213169612 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39799 State: PUBLISHED Published: 2022-04-12T16:11:43 Last Updated: 2024-08-04T02:20:33.351Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-200288596 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39800 State: PUBLISHED Published: 2022-04-12T16:11:44 Last Updated: 2024-08-04T02:20:33.383Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208277166References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39801 State: PUBLISHED Published: 2022-04-12T16:11:44 Last Updated: 2024-08-04T02:20:33.261Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-209791720References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39802 State: PUBLISHED Published: 2022-04-12T16:11:45 Last Updated: 2024-08-04T02:20:33.250Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213339151References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39803 State: PUBLISHED Published: 2022-04-12T16:11:46 Last Updated: 2024-08-04T02:20:33.321Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-193790350 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39804 State: PUBLISHED Published: 2022-04-12T16:11:47 Last Updated: 2024-08-04T02:20:33.365Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file picker with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-215002587 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39805 State: PUBLISHED Published: 2022-04-12T16:11:47 Last Updated: 2024-08-04T02:20:33.327Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-212694559 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39806 State: PUBLISHED Published: 2022-06-15T13:17:42 Last Updated: 2024-08-04T02:20:33.281Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-215387420 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/p
15387420 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-06-01
CVE ID: CVE-2021-39807 State: PUBLISHED Published: 2022-04-12T16:11:48 Last Updated: 2024-08-04T02:20:33.276Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-209446496 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/securit
roid ID: A-209446496 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39808 State: PUBLISHED Published: 2022-04-12T16:11:49 Last Updated: 2024-08-04T02:20:33.432Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209966086 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/
id ID: A-209966086 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39809 State: PUBLISHED Published: 2022-04-12T16:11:50 Last Updated: 2024-08-04T02:20:33.299Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205837191 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-04-01
CVE ID: CVE-2021-39810 State: PUBLISHED Published: 2023-10-30T16:18:53.654Z Last Updated: 2025-09-04T18:33:43.363Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2021-39812 State: PUBLISHED Published: 2022-04-12T16:11:54 Last Updated: 2024-08-04T02:20:33.343Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205522359References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-04-01
CVE ID: CVE-2021-39814 State: PUBLISHED Published: 2022-04-12T16:11:55 Last Updated: 2024-08-04T02:20:33.320Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216792660References: N/A Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2022-04-01
CVE ID: CVE-2021-39815 State: PUBLISHED Published: 2022-08-24T13:42:56 Last Updated: 2024-08-04T02:20:33.005Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-08-01
CVE ID: CVE-2021-39816 State: PUBLISHED Published: 2021-09-01T14:35:21.319Z Last Updated: 2025-04-23T19:30:17.689Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-39817 State: PUBLISHED Published: 2021-09-01T14:36:14.251Z Last Updated: 2025-04-23T19:29:45.371Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-39818 State: PUBLISHED Published: 2021-09-27T15:42:22.093399Z Last Updated: 2024-09-16T18:54:12.849Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-788 Description: Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/incopy/apsb21-71.html
CVE ID: CVE-2021-39819 State: PUBLISHED Published: 2021-09-27T15:42:11.675166Z Last Updated: 2024-09-17T02:00:35.738Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-788 Description: Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/incopy/apsb21-71.html
CVE ID: CVE-2021-39820 State: PUBLISHED Published: 2022-06-15T16:53:55.086Z Last Updated: 2025-04-23T18:15:07.068Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-787 Description: Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/pro
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb21-73.html
CVE ID: CVE-2021-39821 State: PUBLISHED Published: 2021-09-29T15:36:44.699Z Last Updated: 2025-04-23T19:26:46.894Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-125 Description: Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesig
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb21-73.html
CVE ID: CVE-2021-39822 State: PUBLISHED Published: 2023-07-20T06:23:11.876Z Last Updated: 2025-03-05T18:48:29.280Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-787 Description: Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesi
CVE ID: CVE-2021-39823 State: PUBLISHED Published: 2021-09-27T15:42:06.539086Z Last Updated: 2024-09-17T02:47:12.670Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: SVG Native Viewer Problem Types: CWE-122 Description: Adobe svg-native-viewer 8182d14dfad5d1e10f53ed830328d7d9a3cfa96d and earlier versions are affected by a heap buffer overflow vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securit
oit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/svg-native-viewer/apsb21-72.html
CVE ID: CVE-2021-39824 State: PUBLISHED Published: 2021-09-27T15:42:41.635859Z Last Updated: 2024-09-16T19:00:45.654Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.ht
t Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.html
CVE ID: CVE-2021-39825 State: PUBLISHED Published: 2021-09-27T15:43:13.566962Z Last Updated: 2024-09-16T16:18:53.971Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Elements Problem Types: CWE-787 Description: Photoshop Elements versions 2021 build 19.0 (20210304.m.156367) (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious TTF file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/photoshop
le. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/photoshop_elements/apsb21-77.html
CVE ID: CVE-2021-39826 State: PUBLISHED Published: 2021-09-27T15:42:17.137308Z Last Updated: 2024-09-17T01:16:02.309Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Digital Editions Problem Types: CWE-78 Description: Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/Digital