VYPR

LockSettingsService

by Google

CVEs (2)

  • CVE-2016-3749HigJul 11, 2016
    risk 0.55cvss 8.4epss 0.00

    server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930.

  • CVE-2016-3908MedOct 10, 2016
    risk 0.36cvss 5.5epss 0.00

    The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and consequently gain privileges, via a crafted application, aka internal bug 30003944.