CVE-2016-6718: Infoleak
An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve sensitive information without user interaction. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-30455516.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs to get a malicious application running locally on the Android device. No special privileges or user interaction are required after the application is present.
What could be exposed if exploitation succeeds?
A malicious local application could retrieve sensitive information through the Account Manager Service. The available data rates the impact to confidentiality as high, with no integrity or availability impact.
Which Android releases are affected?
Android 7.0 is affected before the 2016-11-01 security update. The provided data does not identify other affected Android versions.