{"id":"CVE-2021-39746","aliases":["EUVD-2021-26103","GHSA-wqmh-4ppw-r5xg"],"status":"published","title":"In PermissionController, there is a possible way to delete some local files due to an unsafe...","description":"In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194696395","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00113,"percentile":0.0145,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2022-03-30T16:02:11Z","modified":"2026-06-17T04:04:05Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-12l","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39746"},{"url":"https://github.com/advisories/GHSA-wqmh-4ppw-r5xg"}],"sources":{"cve":[{"id":"CVE-2021-39746","description":"In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194696395","status":"published","published":"2022-03-30T16:02:11Z","modified":"2024-08-04T02:13:38.348Z","updated_at":"2026-11-02T14:33:09.175141Z"}],"euvd":[{"id":"EUVD-2021-26103","description":"In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194696395","status":"published","published":"2022-03-30T16:02:11Z","modified":"2024-08-04T02:13:38Z","updated_at":"2026-11-03T03:24:22.263982Z"}],"ghsa":[{"id":"GHSA-wqmh-4ppw-r5xg","title":"In PermissionController, there is a possible way to delete some local files due to an unsafe...","description":"In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194696395","status":"published","published":"2022-03-31T00:00:21Z","modified":"2023-01-27T05:01:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:41:51.095902Z"}],"nvd":[{"id":"CVE-2021-39746","description":"In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194696395","status":"published","published":"2022-03-30T16:15:09.277Z","modified":"2026-06-17T04:04:05.67Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:05.581807Z"}]}}