CVE-2016-6708: Improper Access Control

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or...

CVE-2016-3886

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438...

Code injection

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438...

CVE-2016-3886

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438...

CVE-2016-3886

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438...

CVE-2016-3886

CVE-2016-3886 affects Android 7.0 System UI Tuner (systemui/statusbar/phone/QuickStatusBarHeader.java). The issue: the System UI Tuner on the lockscreen does not prevent tuner changes, enabling a physically proximate attacker to modify a setting and gain privileges. Root cause: ability to modify ...

PT-2016-5718

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-09-01 Description The issue allows physically proximate attackers to gain privileges by modifying a setting on the lockscreen, due to the System UI Tuner not preventing tuner changes. This is related to the...

CVE-2016-3886: Undefined Security Weakness

systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2016-07413)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A local elevation of privilege vulnerability exists in System UI Tuner in Android version 7.0. A local attacker can exploit this vulnerability to modify the protection settings of...

The vulnerability of the Android operating system, which allows a perpetrator to circumvent the restrictions of the DEVICE_POWER requirement.

The vulnerability of the packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java file in the Android operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to circumvent the DEVICEPOWER requirement by sending...

Android System UI Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. system UI is the system interface that comes with Android. A denial of service vulnerability exists in System UI in Android. An attacker can exploit this vulnerability by using a...