CVE-2016-3923: Google Android

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently gain privileges via a crafted application, aka internal bug 30647115.

Affected products

• Google Android: up to and including 7.0

Published 2016-10-10. Last modified 2026-06-17.