{"uuid": "7d683b8a-57b3-485b-aed1-eb7c418a01f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-01T17:00:46.817164Z"}