{"id":"ASB-A-473812391", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-19T15:21:58.810540849Z", "aliases":["CVE-2026-0093", "A-473812391"], "details":"In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["249607597370264830851362726405154015173", "178623044373981739044386017382561244851", "260735100511349823035606178929262004152", "96905710419506132194088665086566227236", "99838751565460380791628710163388835392"], "threshold":0.9}, "id":"ASB-A-473812391-225db993", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"}}, {"deprecated":false, "digest":{"function_hash":"293033288484433833086437616036677828180", "length":446}, "id":"ASB-A-473812391-665fc370", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"function_hash":"1969484911312321971625466025349271612", "length":571}, "id":"ASB-A-473812391-a1296dc3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"function_hash":"77512333391319097563945191882230601873", "length":655}, "id":"ASB-A-473812391-db26a6db", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java", "function":"loadHeader"}}, {"deprecated":false, "digest":{"line_hashes":["286758239130468370542504240264374029998", "198929640315088684422500658482555996242", "9082788145369732231762339435505700124", "58496260375189408325215300380198540524", "40014189659150200916594044700088199513", "77224342357809149183479777464751465054", "11711124836413969668047194545661499358", "104386890673949926694563712726201540078", "174970364241947853447272827728673893129"], "threshold":0.9}, "id":"ASB-A-473812391-ff3e23a8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"77512333391319097563945191882230601873", "length":655}, "id":"ASB-A-473812391-064b1f99", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java", "function":"loadHeader"}}, {"deprecated":false, "digest":{"function_hash":"1969484911312321971625466025349271612", "length":571}, "id":"ASB-A-473812391-1fb293b0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"line_hashes":["286758239130468370542504240264374029998", "198929640315088684422500658482555996242", "9082788145369732231762339435505700124", "58496260375189408325215300380198540524", "40014189659150200916594044700088199513", "77224342357809149183479777464751465054", "11711124836413969668047194545661499358", "104386890673949926694563712726201540078", "174970364241947853447272827728673893129"], "threshold":0.9}, "id":"ASB-A-473812391-6262da86", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}, {"deprecated":false, "digest":{"line_hashes":["249607597370264830851362726405154015173", "178623044373981739044386017382561244851", "260735100511349823035606178929262004152", "96905710419506132194088665086566227236", "99838751565460380791628710163388835392"], "threshold":0.9}, "id":"ASB-A-473812391-6fde0e4a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"}}, {"deprecated":false, "digest":{"function_hash":"293033288484433833086437616036677828180", "length":446}, "id":"ASB-A-473812391-72c93583", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"293033288484433833086437616036677828180", "length":446}, "id":"ASB-A-473812391-3c366345", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"line_hashes":["249607597370264830851362726405154015173", "178623044373981739044386017382561244851", "260735100511349823035606178929262004152", "96905710419506132194088665086566227236", "99838751565460380791628710163388835392"], "threshold":0.9}, "id":"ASB-A-473812391-3cca0454", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"}}, {"deprecated":false, "digest":{"function_hash":"1969484911312321971625466025349271612", "length":571}, "id":"ASB-A-473812391-4750fe21", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"function_hash":"77512333391319097563945191882230601873", "length":655}, "id":"ASB-A-473812391-d7060a23", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java", "function":"loadHeader"}}, {"deprecated":false, "digest":{"line_hashes":["286758239130468370542504240264374029998", "198929640315088684422500658482555996242", "9082788145369732231762339435505700124", "58496260375189408325215300380198540524", "40014189659150200916594044700088199513", "77224342357809149183479777464751465054", "11711124836413969668047194545661499358", "104386890673949926694563712726201540078", "174970364241947853447272827728673893129"], "threshold":0.9}, "id":"ASB-A-473812391-d8c32a2f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"1969484911312321971625466025349271612", "length":571}, "id":"ASB-A-473812391-2b0a0704", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"function_hash":"77512333391319097563945191882230601873", "length":655}, "id":"ASB-A-473812391-34d3c1e3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java", "function":"loadHeader"}}, {"deprecated":false, "digest":{"line_hashes":["249607597370264830851362726405154015173", "178623044373981739044386017382561244851", "260735100511349823035606178929262004152", "96905710419506132194088665086566227236", "99838751565460380791628710163388835392"], "threshold":0.9}, "id":"ASB-A-473812391-622ae412", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"}}, {"deprecated":false, "digest":{"line_hashes":["286758239130468370542504240264374029998", "198929640315088684422500658482555996242", "9082788145369732231762339435505700124", "58496260375189408325215300380198540524", "40014189659150200916594044700088199513", "77224342357809149183479777464751465054", "11711124836413969668047194545661499358", "104386890673949926694563712726201540078", "174970364241947853447272827728673893129"], "threshold":0.9}, "id":"ASB-A-473812391-7e1a7d12", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"293033288484433833086437616036677828180", "length":446}, "id":"ASB-A-473812391-9a1cbbbb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["309903578932951313554907657347158230338", "178623044373981739044386017382561244851", "260735100511349823035606178929262004152", "96905710419506132194088665086566227236", "99838751565460380791628710163388835392"], "threshold":0.9}, "id":"ASB-A-473812391-2f2b6d51", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"}}, {"deprecated":false, "digest":{"function_hash":"293033288484433833086437616036677828180", "length":446}, "id":"ASB-A-473812391-611c8ad2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"line_hashes":["286758239130468370542504240264374029998", "198929640315088684422500658482555996242", "9082788145369732231762339435505700124", "58496260375189408325215300380198540524", "40014189659150200916594044700088199513", "77224342357809149183479777464751465054", "11711124836413969668047194545661499358", "104386890673949926694563712726201540078", "174970364241947853447272827728673893129"], "threshold":0.9}, "id":"ASB-A-473812391-b4784578", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"1969484911312321971625466025349271612", "length":571}, "id":"ASB-A-473812391-cbcbd6ce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229", "target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java", "function":"bindView"}}, {"deprecated":false, "digest":{"function_hash":"77512333391319097563945191882230601873", "length":655}, "id":"ASB-A-473812391-f9683a57", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229", "target":{"file":"src/com/android/settings/security/RequestManageCredentials.java", "function":"loadHeader"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/88ab2340c2559d8b74cdf4e2acc14fb5327f2481"}]}