CVE-2021-1906
ENISA EUVD: EUVD-2021-7370 ↗
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 5, 2026
3 articles
EPSS Score
Source: FIRST.org · 2026-05-24
0.14%
probability
This CVE has a 0.14% probability
of being exploited in the next 30 days.
0%
Top 33.5th percentile of all CVEs
100%
CVSS v3.1
Source: NVD6.2
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Project ZeroImproper error handling in GPU
Affected Products
Google Project Zero
Discovered
Nov. 17, 2020
Patched
May 3, 2021
Reported by
???
Root Cause Analysis
???
May Android security updates patch 4 zero-days exploited in the wild
BleepingComputer
May 19, 2021
Qualys Response to CISA Alert: Binding Operational Directive 22-01
Qualys
Nov 09, 2021
Signal Intelligence
Confidence
95%
EPSS
0.14%
CVSS v3.1
6.2
Mentions
3
Last Seen
Nov 09, 2021
CNA Information
Analyst Note
Auto-imported from Google Project Zero — confirmed zero-day by definition.
Triage Info
Decided atMar 05, 2026