CVE-2021-1021
published 2021-12-15CVE-2021-1021: In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input…
PriorityP336high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.12%
2.3th percentile
In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195031703
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| msrc | cm1_cockpit_248-3_on_cbl_mariner_1.0 | — | — |
| platform | frameworks_base | >= 12:0 < 12:2021-12-01 | 12:2021-12-01 |
| smartbear | swagger-ui-dist | >= 0 < 4.1.3 | 4.1.3 |
| yourls | yourls | 0 – 1.8.1 | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat10.0CRITICAL
vendor_msrc4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2021-47615: In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
For the case of IB_
osv·2024-06-19
CVE-2021-47615 CVE-2021-47615: In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
For the case of IB_
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
For the case of IB_MR_TYPE_DM the mr does doesn't have a umem, even though
it is a user MR. This causes function mlx5_free_priv_descs() to think that
it is a kernel MR, leading to wrongly accessing mr->descs that will get
wrong values in the union which leads to attempt to release resources that
were not allocated in the first place.
For example:
DMA-API: mlx5_core 0000:08:00.1: device driver tries to free DMA memory it has not allocated [device address=0x0000000000000000] [size=0 bytes]
WARNING: CPU: 8 PID: 1021 at kernel/dma/debug.c:961 check_unmap+0x54f/0x8b0
RIP: 0010:check_unmap+0x54f/0x8b0
Call Trace:
debug_dma_unmap_page+0x57/0x60
mlx5_free_priv_descs+0
GHSA
Spoofing attack in swagger-ui-dist
ghsa·2022-03-12
CVE-2021-46708 [MEDIUM] CWE-1021 Spoofing attack in swagger-ui-dist
Spoofing attack in swagger-ui-dist
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
GHSA
GHSA-v8h7-57p4-wr4f: In snoozeNotificationInt of NotificationManagerService
ghsa_unreviewed·2021-12-16
CVE-2021-1021 [HIGH] CWE-20 GHSA-v8h7-57p4-wr4f: In snoozeNotificationInt of NotificationManagerService
In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195031703
OSV
CVE-2021-1021: In snoozeNotificationInt of NotificationManagerService
osv·2021-12-01
CVE-2021-1021 CVE-2021-1021: In snoozeNotificationInt of NotificationManagerService
In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
GHSA
Improper Restriction of Rendered UI Layers or Frames in yourls
ghsa·2021-08-30
CVE-2021-3734 [MEDIUM] CWE-1021 Improper Restriction of Rendered UI Layers or Frames in yourls
Improper Restriction of Rendered UI Layers or Frames in yourls
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames
Microsoft
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website inside an <iFrame> HTML entry. This may be used
vendor_msrc·2022-03-08·CVSS 4.3
CVE-2021-3660 [MEDIUM] CWE-1021 Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website inside an <iFrame> HTML entry. This may be used
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to addi
Red Hat
Mozilla: Iframe sandbox bypass with XSLT
vendor_redhat·2022-01-11·CVSS 10.0
CVE-2021-4140 [CRITICAL] CWE-1021 Mozilla: Iframe sandbox bypass with XSLT
Mozilla: Iframe sandbox bypass with XSLT
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
The Mozilla Foundation Security Advisory describes this flaw as:
It was possible to construct specific XSLT markups that would enable someone to bypass an iframe sandbox.
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
Mozilla: URL leakage when navigating while executing asynchronous function
vendor_redhat·2021-12-07·CVSS 6.5
CVE-2021-43536 [MEDIUM] CWE-1021 Mozilla: URL leakage when navigating while executing asynchronous function
Mozilla: URL leakage when navigating while executing asynchronous function
Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
The Mozilla Foundation Security Advisory describes this flaw as:
Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
Mozilla: Missing fullscreen and pointer lock notification when requesting both
vendor_redhat·2021-12-07·CVSS 4.3
CVE-2021-43538 [MEDIUM] CWE-1021 Mozilla: Missing fullscreen and pointer lock notification when requesting both
Mozilla: Missing fullscreen and pointer lock notification when requesting both
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
The Mozilla Foundation Security Advisory describes this flaw as:
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of s
Red Hat
Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed
vendor_redhat·2021-12-07·CVSS 4.3
CVE-2021-43546 [MEDIUM] CWE-1021 Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed
Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed
It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain
vendor_redhat·2021-11-02·CVSS 4.3
CVE-2021-38509 [MEDIUM] CWE-1021 Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain
Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain
Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top an uncontrolled webpage of the attacker's choosing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
vendor_redhat·2021-11-02·CVSS 4.3
CVE-2021-38508 [MEDIUM] CWE-1021 Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning
vendor_redhat·2021-11-02·CVSS 4.3
CVE-2021-38506 [MEDIUM] CWE-1021 Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning
Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
The Mozilla Foundation Security Advisory describes this flaw as:
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
Mozilla: Validation message could have been overlaid on another origin
vendor_redhat·2021-10-05·CVSS 6.5
CVE-2021-38497 [MEDIUM] CWE-1021 Mozilla: Validation message could have been overlaid on another origin
Mozilla: Validation message could have been overlaid on another origin
Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Red Hat
cockpit: pages vulnerable to clickjacking
vendor_redhat·2021-07-20·CVSS 4.3
CVE-2021-3660 [MEDIUM] CWE-1021 cockpit: pages vulnerable to clickjacking
cockpit: pages vulnerable to clickjacking
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
Statement: In cockpit versions 236 and above (Red Hat Enterprise Linux 8.4 and above), this flaw should not be exploitable, as the session cookie has the `SameSite=Strict;` option enabled, preventing the Web Browsers to reuse it from 3rd party web sites
Red Hat
kibana: Use of Unmaintained Third Party Components
vendor_redhat·2021-05-25·CVSS 6.6
CVE-2021-22142 [MEDIUM] CWE-1021 kibana: Use of Unmaintained Third Party Components
kibana: Use of Unmaintained Third Party Components
Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to generate the downloadable reports. If a user with permissions to generate reports is able to render arbitrary HTML with this browser, they may be able to leverage known Chromium vulnerabilities to conduct further attacks. Kibana contains a number of protections to prevent this browser from rendering arbitrary content.
Kibana contains an embedded version of the Chromium browser that the Reporting feature uses. An attacker potentially is able to leverage known Chromium vulnerabilities to conduct further attacks.
Statement: The kibana reporting feature is part of the X-Pack features [1].
In OpenShift Container Platform (OCP) the kibana components
Red Hat
Mozilla: Malicious extensions could have spoofed popup information
vendor_redhat·2021-03-23·CVSS 6.5
CVE-2021-23984 [MEDIUM] CWE-1021 Mozilla: Malicious extensions could have spoofed popup information
Mozilla: Malicious extensions could have spoofed popup information
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
The Mozilla Foundation Security Advisory describes this issue as:
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials.
P
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-12-15
Published