CWE Code: 1021
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Restriction of Rendered UI Layers or Frames
Summary: in functionality implemented in system ui, there are insufficient protections implemented around overlay windows. this could lead to local escalation of privilege with no additional execution privileges needed. user interaction is needed for exploitation. product: android. versions: android-7.0 android-7.1.1 android-7.1.2 android-8.0 android-8.1. android id: a-34170870
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-11-14
Last Modified Date: 2019-10-03