Android setUserDisclaimerAcknowledged Privilege Escalation

The vulnerability of the setUserDisclaimerAcknowledged method in the CarDevicePolicyService.java class of Android operating systems is related to an incorrect restriction on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to increase their...

CVE-2025-26418: Missing Authorization

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...