CVE-2017-0492: Google Android

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 7.1.1. Android ID: A-30150688.

Affected products

• Google Android: version 7.0 only; version 7.1.0 only; version 7.1.1 only

Published 2017-03-08. Last modified 2026-06-17.