Lucene search
+L

7 matches found

CNVD
CNVD
•added 2026/06/05 12:00 a.m.•20 views

Google Android Permission Elevation Vulnerability (CNVD-2026-29382)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which arises from insufficient permission checks in the setUserDisclaimerAcknowledged method of CarDevicePolicyService.java. Attackers can exploit this...

7.8CVSS7.7AI score0.00068EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/06/03 10:01 a.m.•28 views

CVE-2025-26418

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS5.9AI score0.00068EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•29 views

EUVD-2025-210010

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

5.9AI score0.00068EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/06/02 12:00 a.m.•15 views

The vulnerability of the `setUserDisclaimerAcknowledged` method in the `CarDevicePolicyService.java` class of Android operating systems allows a perpetrator to increase their privileges.

The vulnerability of the setUserDisclaimerAcknowledged method in the CarDevicePolicyService.java class of Android operating systems is related to an incorrect restriction on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to increase their...

8.4CVSS5.8AI score0.00068EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/06/01 10:16 p.m.•26 views

CVE-2025-26418

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00068EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•5 views

CVE-2025-26418: Missing Authorization

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS7.7AI score0.00068EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/01 12:00 a.m.•24 views

ASB-A-351830787

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS7.7AI score0.00068EPSS
SaveExploits0References1
Rows per page
Query Builder