The vulnerability of the `setUserDisclaimerAcknowledged` method in the `CarDevicePolicyService.java` class of Android operating systems allows a perpetrator to increase their privileges.

The vulnerability of the setUserDisclaimerAcknowledged method in the CarDevicePolicyService.java class of Android operating systems is related to an incorrect restriction on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to increase their...

CVE-2025-26418: Missing Authorization

In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...