CVE-2017-0666
HighSummary
CVE-2017-0666 is a privilege escalation vulnerability in the Android framework. It affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data or system functions, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in Android framework
See all- CVE-2017-0667High
CVE-2017-0667 is a privilege escalation vulnerability in the Android framework. It affects versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
- CVE-2017-0665High
CVE-2017-0665 is a privilege escalation vulnerability in the Android framework. It affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
- CVE-2017-0664High
CVE-2017-0664 is a privilege escalation vulnerability in the Android framework. It affects versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
- CVE-2016-3832High
The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, allowing attackers to bypass an unspecified protection mechanism via a crafted application.
Original NVD description (English source)
A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37285689.