{"metadata": {"vulnerability": "cve-2022-20421", "count": 112, "kinds": {"milestone": 24, "sighting": 9, "kev": 0, "other": 79}}, "data": [{"timestamp": "2021-10-14T00:00:00Z", "date_only": false, "value": "2021-10-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-20421", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-03T22:00:00Z", "date_only": false, "value": "2022-10-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-10-03T22:00:00Z", "date_only": false, "value": "2022-10-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-10-03T22:00:00Z", "date_only": false, "value": "2022-10-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-10-04T00:00:00Z", "date_only": false, "value": "2022-10-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-881", "record": "CERTFR-2022-AVI-881", "field": "last_revision_date"}, {"timestamp": "2022-10-04T00:00:00Z", "date_only": false, "value": "2022-10-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-881", "record": "CERTFR-2022-AVI-881", "field": "initial_release_date"}, {"timestamp": "2022-10-04T00:00:00Z", "date_only": false, "value": "2022-10-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-881", "record": "CERTFR-2022-AVI-881", "field": "revisions.0.revision_date"}, {"timestamp": "2022-10-11T00:00:00Z", "date_only": false, "value": "2022-10-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-20421", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-10-11T20:15:00Z", "date_only": false, "value": "2022-10-11T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GWP4-2H57-RRXW", "record": "GHSA-GWP4-2H57-RRXW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-10-11T20:15:00Z", "date_only": false, "value": "2022-10-11T20:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-20421", "record": "UBUNTU-CVE-2022-20421", "field": "published"}, {"timestamp": "2022-10-11T20:15:00Z", "date_only": false, "value": "2022-10-11T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-20421", "record": "GSD-2022-20421", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-10-11T20:15:12.533Z", "date_only": false, "value": "2022-10-11T20:15:12.533", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20421", "record": "FKIE_CVE-2022-20421", "field": "published"}, {"timestamp": "2022-10-12T00:32:27Z", "date_only": false, "value": "2022-10-12T00:32:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/51213", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "ada53428-7428-4537-84d6-d8d48949def5", "content": "\u203c CVE-2022-20421 \u203c\n\nIn binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/51213"}, {"timestamp": "2022-10-12T12:00:22Z", "date_only": false, "value": "2022-10-12T12:00:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GWP4-2H57-RRXW", "record": "GHSA-GWP4-2H57-RRXW", "field": "published"}, {"timestamp": "2022-10-21T00:00:00Z", "date_only": false, "value": "2022-10-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-941", "record": "CERTFR-2022-AVI-941", "field": "last_revision_date"}, {"timestamp": "2022-10-21T00:00:00Z", "date_only": false, "value": "2022-10-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-941", "record": "CERTFR-2022-AVI-941", "field": "initial_release_date"}, {"timestamp": "2022-10-21T00:00:00Z", "date_only": false, "value": "2022-10-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-941", "record": "CERTFR-2022-AVI-941", "field": "revisions.0.revision_date"}, {"timestamp": "2022-10-21T11:05:19Z", "date_only": false, "value": "2022-10-21T11:05:19Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-2013", "record": "OESA-2022-2013", "field": "published"}, {"timestamp": "2022-10-21T11:05:19Z", "date_only": false, "value": "2022-10-21T11:05:19Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-2014", "record": "OESA-2022-2014", "field": "published"}, {"timestamp": "2022-10-21T11:05:19Z", "date_only": false, "value": "2022-10-21T11:05:19Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-2015", "record": "OESA-2022-2015", "field": "published"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "cve-2022-20421", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-984", "record": "CERTFR-2022-AVI-984", "field": "last_revision_date"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-984", "record": "CERTFR-2022-AVI-984", "field": "initial_release_date"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-984", "record": "CERTFR-2022-AVI-984", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-03T02:42:00Z", "date_only": false, "value": "2022-12-03T02:42Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-20421", "record": "GSD-2022-20421", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": false, "value": "2023-01-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0027", "record": "CERTFR-2023-AVI-0027", "field": "last_revision_date"}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": false, "value": "2023-01-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0027", "record": "CERTFR-2023-AVI-0027", "field": "initial_release_date"}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": false, "value": "2023-01-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0027", "record": "CERTFR-2023-AVI-0027", "field": "revisions.0.revision_date"}, {"timestamp": "2023-01-20T00:00:00Z", "date_only": false, "value": "2023-01-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0047", "record": "CERTFR-2023-AVI-0047", "field": "last_revision_date"}, {"timestamp": "2023-01-20T00:00:00Z", "date_only": false, "value": "2023-01-20T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0047", "record": "CERTFR-2023-AVI-0047", "field": "initial_release_date"}, {"timestamp": "2023-01-20T00:00:00Z", "date_only": false, "value": "2023-01-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0047", "record": "CERTFR-2023-AVI-0047", "field": "revisions.0.revision_date"}, {"timestamp": "2023-02-15T23:00:00Z", "date_only": false, "value": "2023-02-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-02-15T23:00:00Z", "date_only": false, "value": "2023-02-15T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-02-17T00:00:00Z", "date_only": false, "value": "2023-02-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0147", "record": "CERTFR-2023-AVI-0147", "field": "last_revision_date"}, {"timestamp": "2023-02-17T00:00:00Z", "date_only": false, "value": "2023-02-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0147", "record": "CERTFR-2023-AVI-0147", "field": "initial_release_date"}, {"timestamp": "2023-02-17T00:00:00Z", "date_only": false, "value": "2023-02-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0147", "record": "CERTFR-2023-AVI-0147", "field": "revisions.0.revision_date"}, {"timestamp": "2023-05-20T06:50:36Z", "date_only": false, "value": "2023-05-20T06:50:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3527", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "6970afaf-1cf2-4a71-9f41-a2ebe6a075f5", "content": "\ud83d\udd25 Bad Spin : Android Binder LPE\n\nPrivilege escalation exploit from unstrusted_app for Android Binder vulnerability (CVE-2022-20421).\n\nRun from shell:\n\n1\ufe0f\u20e3Compile the libbadspin.so library by typing make push in the src/ directory. This will also push the library to /data/local/tmp.\n\n2\ufe0f\u20e3Run adb shell.\n\n3\ufe0f\u20e3Run LD_PRELOAD=/data/local/tmp/libbadspin.so sleep 1. This will load the library and start the exploit.\n\nRun from demo app:\n\n1\ufe0f\u20e3Compile libbadspin.so by typing make push in the src/ directory. This will copy the library to the assets directory for the demo Android app.\n\n2\ufe0f\u20e3Compile the demo Android app in the app/ directory. (You might need Android Studio to do this.)\n\n3\ufe0f\u20e3Run the app and click on the \"Exploit\" button.\n\n4\ufe0f\u20e3Consume logs using: adb logcat -s BADSPIN\n\nDownload", "url": "https://t.me/crackcodes/3527"}, {"timestamp": "2023-06-02T16:30:28Z", "date_only": false, "value": "2023-06-02T16:30:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1563", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "ff9def05-e203-4211-b52a-8e3c2f58fdaf", "content": "CVE-2022-20421\nBad Spin: Android Binder Privilege Escalation Exploit\ndownload\n\n#android", "url": "https://t.me/proxy_bar/1563"}, {"timestamp": "2023-06-12T22:00:00Z", "date_only": false, "value": "2023-06-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1432", "record": "WID-SEC-W-2023-1432", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-12T22:00:00Z", "date_only": false, "value": "2023-06-12T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1432", "record": "WID-SEC-W-2023-1432", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-12T22:00:00Z", "date_only": false, "value": "2023-06-12T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1432", "record": "WID-SEC-W-2023-1432", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0453", "record": "CERTFR-2023-AVI-0453", "field": "initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0453", "record": "CERTFR-2023-AVI-0453", "field": "revisions.0.revision_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0453", "record": "CERTFR-2023-AVI-0453", "field": "last_revision_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0453", "record": "CERTFR-2023-AVI-0453", "field": "revisions.1.revision_date"}, {"timestamp": "2023-06-22T22:00:00Z", "date_only": false, "value": "2023-06-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1432", "record": "WID-SEC-W-2023-1432", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-06-22T22:00:00Z", "date_only": false, "value": "2023-06-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1432", "record": "WID-SEC-W-2023-1432", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-06-25T11:12:20Z", "date_only": false, "value": "2023-06-25T11:12:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3039", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "c4ea3d32-d1f1-4433-8ef4-ad728780f9c0", "content": "Tools - Hackers Factory \n\nEndpoints Explorer\n\nA Python script that employs multiple bypass rules to discover sensitive endpoints.\n\nhttps://github.com/wzqs/endpoints_explore\n\n#infosec #pentesting #bugbount\n\n\u200b\u200bCoercer\n\nA python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.\n\nhttps://github.com/p0dalirius/Coercer\n\n#infosec #pentesting #redteam\n\n\u200b\u200bdirsearch_bypass403\n\nDirectory scanning + extraction of URLs/subdomains from JS files + 403 status bypass + fingerprinting.\n\nhttps://github.com/lemonlove7/dirsearch_bypass403\n\n#infosec #pentesting #redteam\n\n\u200b\u200bDarc Viewpoint\n\nCybersecurity Assets & Threats Modeling analysis.\n\nhttps://github.com/eclipse/capella-cybersecurity\n\n#cybersecurity #infosec\n\n\u200b\u200bBug Bounty Dork\n\nThis will output all the google results for each of the tasks so you can hopefully find a vunerability. 503 error means you need a new IP as google knows your up to something! This will output the results to files and then you cna browse and see what you have found.\n\nhttps://github.com/random-robbie/bugbountydork\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bHypervisor\n\nThe most comprehensive resource for Virtualization with a focus on Cybersecurity, Learn, exploit, read, and create let's make the industry safer by sharing and learning.\n\nhttps://github.com/AtonceInventions/Hypervisor\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bBug Bounty Reports Templates\n\nList of reporting templates I have used since I started doing BBH.\n\nhttps://github.com/pdelteil/BugBountyReportTemplates\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bCVE-2022-20421\n\nPrivilege escalation exploit from unstrusted_app for Android Binder vulnerability (CVE-2022-20421). The vulnerability is patched on Android's Security Bulletin of October 2022.\n\nhttps://github.com/0xkol/badspin\n\n#cve #infosec #exploit\n\n\u200b\u200bNetSec\n\nA tool to analyze devices connecting to the router and alert accordingly when a new device is connected. This app can display and store intruders' IP address, MAC address, and Block the device.\n\nhttps://github.com/thevickypedia/NetSec\n\n#cybersecurity #infosec\n\n\u200b\u200bAISec\n\nCybersecurity of Machine Learning and Artificial Intelligence Implementations.\n\nhttps://github.com/sdnewhop/AISec\n\n#cybersecurity #infosec\n\n\u200b\u200bProcessInjection\n\nThe program is designed to perform process injection. Currently the tool supports 5 process injection techniques.\n\nhttps://github.com/3xpl01tc0d3r/ProcessInjection\n\n#infosec #pentesting #redteam\n\n\u200b\u200bAADAppAudit\n\nThis tool was initially developed to analyze possible illicit consent grant attacks & in help of analyzing Azure AD consent grant framework but has been developed further since to provide answers to the most typical security related questions around Azure AD integrated apps and permissions.\n\nhttps://github.com/jsa2/AADAppAudit\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3039"}, {"timestamp": "2023-07-07T22:16:42Z", "date_only": false, "value": "2023-07-07T22:16:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/1897", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "bcc9ed8c-f90e-4edd-ad5b-6b0feb4cdd23", "content": "Racing Against the Lock: Exploiting Spinlock UAF in the Android Kernel \nThis paper presents an exploit for a unique Binder kernel use-after-free (UAF) vulnerability which was disclosed recently (CVE-2022-20421) \nWrite-up: https://0xkol.github.io/assets/files/Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf \nSlides: https://0xkol.github.io/assets/files/OffensiveCon23_Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf \nPoC: https://github.com/0xkol/badspin", "url": "https://t.me/androidMalware/1897"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-08-22T09:46:34Z", "date_only": false, "value": "2023-08-22T09:46:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/1957", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "7cd41baa-7b9e-4c0d-833e-0ab50d7e2f19", "content": "In details slides explaining exploitation of binder kernel use-after-free (UAF) vulnerability in the Android kernel (CVE-2022-20421) to achieves full kernel R/W \nAffected devices: devices running Kernel version 5.4.x and 5.10.x\n\nSlides: https://0xkol.github.io/assets/files/OffensiveCon23_Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf\nResearch: https://0xkol.github.io/assets/files/Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf\nPoC: https://github.com/0xkol/badspin", "url": "https://t.me/androidMalware/1957"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-12-13T01:19:17.165Z", "date_only": false, "value": "2023-12-13T01:19:17.165021Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-20421", "record": "GSD-2022-20421", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-09T00:00:00Z", "date_only": false, "value": "2024-01-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-01-09T00:00:00Z", "date_only": false, "value": "2024-01-09T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-770721", "record": "SSA-770721", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0203", "record": "CERTFR-2024-AVI-0203", "field": "last_revision_date"}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0203", "record": "CERTFR-2024-AVI-0203", "field": "initial_release_date"}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-770721", "record": "SSA-770721", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0203", "record": "CERTFR-2024-AVI-0203", "field": "revisions.0.revision_date"}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-770721", "record": "SSA-770721", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-03-14T06:00:00Z", "date_only": false, "value": "2024-03-14T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-074-07", "record": "ICSA-24-074-07", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-03-14T06:00:00Z", "date_only": false, "value": "2024-03-14T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-24-074-07", "record": "ICSA-24-074-07", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-03-14T06:00:00Z", "date_only": false, "value": "2024-03-14T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-24-074-07", "record": "ICSA-24-074-07", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-03T02:10:44.836Z", "date_only": false, "value": "2024-08-03T02:10:44.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-20421", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:35:59.015Z", "date_only": false, "value": "2024-08-15T17:35:59.015+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1599", "record": "WID-SEC-W-2022-1599", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T17:52:18.956Z", "date_only": false, "value": "2024-08-15T17:52:18.956+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1432", "record": "WID-SEC-W-2023-1432", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:28:20Z", "date_only": false, "value": "2024-08-16T08:28:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1100", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "05a60498-31ee-4590-8c3b-bb270d372b4f", "content": "#Offensive_security\n\"Racing Against the Lock: Exploiting Spinlock UAF in the Android Kernel\", OffensiveCon 2023 (full).\n\n]-> Bad Spin: Android Binder LPE Exploit (CVE-2022-20421):\nhttps://github.com/0xkol/badspin", "url": "https://t.me/Rootsec_2/1100"}, {"timestamp": "2024-12-25T16:23:25Z", "date_only": false, "value": "2024-12-25T16:23:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9069", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "b8b7e48e-aff2-4e7d-af66-33d2b1ee3e4a", "content": "#Offensive_security\n\"Racing Against the Lock: Exploiting Spinlock UAF in the Android Kernel\", OffensiveCon 2023 (full).\n\n]-> Bad Spin: Android Binder LPE Exploit (CVE-2022-20421):\nhttps://github.com/0xkol/badspin", "url": "https://t.me/CyberSecurityTechnologies/9069"}, {"timestamp": "2025-08-29T09:00:04Z", "date_only": false, "value": "2025-08-29T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bKP-iwwMQtOOWDZQExb8JL74Stavj2rFrcGJwGzD4-08zAc", "record": "CVE-2022-20421", "field": "creation_timestamp", "uuid": "3c73274a-c6bd-48fc-b17e-30fc2b834f1f"}, {"timestamp": "2026-08-06T11:05:19Z", "date_only": false, "value": "2026-08-06T11:05:19Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-2013", "record": "OESA-2022-2013", "field": "modified"}, {"timestamp": "2026-08-06T11:05:19Z", "date_only": false, "value": "2026-08-06T11:05:19Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-2014", "record": "OESA-2022-2014", "field": "modified"}, {"timestamp": "2026-08-06T11:05:19Z", "date_only": false, "value": "2026-08-06T11:05:19Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-2015", "record": "OESA-2022-2015", "field": "modified"}, {"timestamp": "2026-09-09T11:30:47Z", "date_only": false, "value": "2026-09-09T11:30:47Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-20421", "record": "UBUNTU-CVE-2022-20421", "field": "modified"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T14:53:09.981Z", "date_only": false, "value": "2026-10-14T14:53:09.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-20421", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:53:09.981Z", "date_only": false, "value": "2026-10-14T14:53:09.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "cve-2022-20421", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:16:59.690Z", "date_only": false, "value": "2026-10-14T15:16:59.690", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20421", "record": "FKIE_CVE-2022-20421", "field": "lastModified"}, {"timestamp": "2026-10-14T15:31:15Z", "date_only": false, "value": "2026-10-14T15:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GWP4-2H57-RRXW", "record": "GHSA-GWP4-2H57-RRXW", "field": "modified"}]}