CVE-2016-2496: Improper Restriction of Rendered UI Layers or Frames

The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796...

PT-2016-2202 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android 6.x versions prior to 2016-06-01 Description: The issue is related to the Framework UI permission-dialog implementation, which allows attackers to conduct tapjacking attacks. This can be achieved by creating a partially overlapping...

Android Framework UI Permission Dialog Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Framework UI is a UI framework component used in it. An elevation of privilege vulnerability exists in the Framework UI privilege dialog box in Android versions prior to...