CVE-2021-0505

CVE-2021-0505 describes a local escalation of privilege vulnerability in the Android 11 Settings app. A missing permission check allows an attacker to disable an always-on VPN, potentially compromising user privacy and security. This vulnerability has a CVSS score of 7.8 (High), indicating a significant risk due to its low attack complexity (AV:L, AC:L) and high impact on confidentiality, integrity, and availability (C:H, I:H, A:H). No user interaction or additional execution privileges are needed for exploitation. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.