{"id":"ASB-A-473812391","details":"In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-473812391","CVE-2026-0093"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/88ab2340c2559d8b74cdf4e2acc14fb5327f2481"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f","target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["249607597370264830851362726405154015173","178623044373981739044386017382561244851","260735100511349823035606178929262004152","96905710419506132194088665086566227236","99838751565460380791628710163388835392"]},"id":"ASB-A-473812391-225db993","signature_type":"Line"},{"deprecated":false,"digest":{"length":446,"function_hash":"293033288484433833086437616036677828180"},"id":"ASB-A-473812391-665fc370","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f","target":{"function":"bindView","file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}},{"deprecated":false,"digest":{"function_hash":"1969484911312321971625466025349271612","length":571},"id":"ASB-A-473812391-a1296dc3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java","function":"bindView"}},{"digest":{"function_hash":"77512333391319097563945191882230601873","length":655},"id":"ASB-A-473812391-db26a6db","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f","target":{"function":"loadHeader","file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["286758239130468370542504240264374029998","198929640315088684422500658482555996242","9082788145369732231762339435505700124","58496260375189408325215300380198540524","40014189659150200916594044700088199513","77224342357809149183479777464751465054","11711124836413969668047194545661499358","104386890673949926694563712726201540078","174970364241947853447272827728673893129"],"threshold":0.9},"id":"ASB-A-473812391-ff3e23a8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f"],"severity":"High","spl":"2026-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5"],"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5","target":{"file":"src/com/android/settings/security/RequestManageCredentials.java","function":"loadHeader"},"deprecated":false,"digest":{"function_hash":"77512333391319097563945191882230601873","length":655},"id":"ASB-A-473812391-064b1f99","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java","function":"bindView"},"deprecated":false,"digest":{"length":571,"function_hash":"1969484911312321971625466025349271612"},"id":"ASB-A-473812391-1fb293b0"},{"target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false,"digest":{"line_hashes":["286758239130468370542504240264374029998","198929640315088684422500658482555996242","9082788145369732231762339435505700124","58496260375189408325215300380198540524","40014189659150200916594044700088199513","77224342357809149183479777464751465054","11711124836413969668047194545661499358","104386890673949926694563712726201540078","174970364241947853447272827728673893129"],"threshold":0.9},"id":"ASB-A-473812391-6262da86","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5","target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false,"digest":{"line_hashes":["249607597370264830851362726405154015173","178623044373981739044386017382561244851","260735100511349823035606178929262004152","96905710419506132194088665086566227236","99838751565460380791628710163388835392"],"threshold":0.9},"id":"ASB-A-473812391-6fde0e4a"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5","target":{"function":"bindView","file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false,"digest":{"function_hash":"293033288484433833086437616036677828180","length":446},"id":"ASB-A-473812391-72c93583"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b","target":{"function":"bindView","file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false,"digest":{"length":446,"function_hash":"293033288484433833086437616036677828180"},"id":"ASB-A-473812391-3c366345","signature_type":"Function"},{"target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false,"digest":{"line_hashes":["249607597370264830851362726405154015173","178623044373981739044386017382561244851","260735100511349823035606178929262004152","96905710419506132194088665086566227236","99838751565460380791628710163388835392"],"threshold":0.9},"id":"ASB-A-473812391-3cca0454","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b"},{"target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java","function":"bindView"},"deprecated":false,"digest":{"function_hash":"1969484911312321971625466025349271612","length":571},"id":"ASB-A-473812391-4750fe21","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b","target":{"function":"loadHeader","file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false,"digest":{"length":655,"function_hash":"77512333391319097563945191882230601873"},"id":"ASB-A-473812391-d7060a23","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["286758239130468370542504240264374029998","198929640315088684422500658482555996242","9082788145369732231762339435505700124","58496260375189408325215300380198540524","40014189659150200916594044700088199513","77224342357809149183479777464751465054","11711124836413969668047194545661499358","104386890673949926694563712726201540078","174970364241947853447272827728673893129"]},"id":"ASB-A-473812391-d8c32a2f"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b"],"severity":"High","spl":"2026-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db"],"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java","function":"bindView"},"deprecated":false,"digest":{"function_hash":"1969484911312321971625466025349271612","length":571},"id":"ASB-A-473812391-2b0a0704","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":655,"function_hash":"77512333391319097563945191882230601873"},"id":"ASB-A-473812391-34d3c1e3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db","target":{"file":"src/com/android/settings/security/RequestManageCredentials.java","function":"loadHeader"}},{"target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false,"digest":{"line_hashes":["249607597370264830851362726405154015173","178623044373981739044386017382561244851","260735100511349823035606178929262004152","96905710419506132194088665086566227236","99838751565460380791628710163388835392"],"threshold":0.9},"id":"ASB-A-473812391-622ae412","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db"},{"id":"ASB-A-473812391-7e1a7d12","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false,"digest":{"line_hashes":["286758239130468370542504240264374029998","198929640315088684422500658482555996242","9082788145369732231762339435505700124","58496260375189408325215300380198540524","40014189659150200916594044700088199513","77224342357809149183479777464751465054","11711124836413969668047194545661499358","104386890673949926694563712726201540078","174970364241947853447272827728673893129"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"293033288484433833086437616036677828180","length":446},"id":"ASB-A-473812391-9a1cbbbb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db","target":{"function":"bindView","file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229","target":{"file":"src/com/android/settings/security/RequestManageCredentials.java"},"deprecated":false,"digest":{"line_hashes":["309903578932951313554907657347158230338","178623044373981739044386017382561244851","260735100511349823035606178929262004152","96905710419506132194088665086566227236","99838751565460380791628710163388835392"],"threshold":0.9},"id":"ASB-A-473812391-2f2b6d51"},{"id":"ASB-A-473812391-611c8ad2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229","target":{"function":"bindView","file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false,"digest":{"function_hash":"293033288484433833086437616036677828180","length":446}},{"deprecated":false,"digest":{"line_hashes":["286758239130468370542504240264374029998","198929640315088684422500658482555996242","9082788145369732231762339435505700124","58496260375189408325215300380198540524","40014189659150200916594044700088199513","77224342357809149183479777464751465054","11711124836413969668047194545661499358","104386890673949926694563712726201540078","174970364241947853447272827728673893129"],"threshold":0.9},"id":"ASB-A-473812391-b4784578","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229","target":{"file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"}},{"digest":{"length":571,"function_hash":"1969484911312321971625466025349271612"},"id":"ASB-A-473812391-cbcbd6ce","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229","target":{"function":"bindView","file":"src/com/android/settings/security/CredentialManagementAppAdapter.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229","target":{"file":"src/com/android/settings/security/RequestManageCredentials.java","function":"loadHeader"},"deprecated":false,"digest":{"function_hash":"77512333391319097563945191882230601873","length":655},"id":"ASB-A-473812391-f9683a57","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229"],"severity":"High","spl":"2026-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"}}],"schema_version":"1.9.0"}