CVE-2025-26437

In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2025-36015

Name of the Vulnerable Software and Affected Versions: CredentialManagerService affected versions not specified Description: A missing permission check in the CredentialManagerServiceStub of CredentialManagerService.java may allow retrieval of candidate credentials, potentially leading to local...