CVE-2021-0568

In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2019-2193

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

Design/Logic Flaw

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

CVE-2019-2193

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

CVE-2019-2018

In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Remote user interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-110172241...

Design/Logic Flaw

In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Remote user interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-110172241...

CVE-2019-2092

In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege, with no additional permissions required. User interaction is not needed for exploitation. Product:...

The vulnerability of the Device Policy Client service in the Android operating system’s Framework component allows a perpetrator to increase their privileges.

The vulnerability of the Device Policy Client DPC component of the Android operating system’s framework is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2017-0830

An elevation of privilege vulnerability in the Android framework device policy client. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498...

CVE-2017-0830

An elevation of privilege vulnerability in the Android framework device policy client. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498...

CVE-2017-0830

An elevation of privilege vulnerability in the Android framework device policy client. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498...

Google Android Framework elevation of privilege vulnerability (CNVD-2017-36348)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Framework device policy client is a device management framework. A privilege extraction vulnerability exists in Framework device policy client in Android. A remote attacke...

Bitlocker Device Policy

Windows 10 Enterprise includes a disk encryption feature called BitLocker, which provides extra file and system protections against unauthorized access of a lost or stolen device. For more protection, you can use BitLocker with Trusted Platform Module TPM chips, version 1.2 or later. A TPM chip...

How to configure Applock device Policy on IOS

How to configure Applock device Policy on IOS...

How to refresh the device policy and observe it

This article describes how to refresh the device policy and observe it...

Home Screen Layout Policy and App Uninstall

Q. Does the Home Screen Layout device policy disable the apps from being uninstalled? A. Yes, apps cannot be uninstalled once the Home Screen Layout policy is deployed...

Google Apps Device Policy - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Google Apps Device Policy published at the 'play' market has multiple vulnerabilities...