CVE-2017-0426: An information disclosure vulnerability in the Filesystem could enable a local malicious application to acc...

Security readout for executives and security teams

CVE-2017-0426 is an Android filesystem information disclosure issue. A malicious app already running on an affected device could access data beyond its normal permissions. The source rates the issue Moderate because sensitive data could be exposed without permission. Exposure is most likely on legacy Android 7.0 or 7.1.1 devices that have not received the relevant Android security bulletin fixes from Google or OEMs. Handle as a moderate legacy mobile exposure. It is most urgent where Android 7.0 or 7.1.1 devices remain in business use and can install untrusted apps. Mitigation focus: Apply Android security updates from Google or the device OEM.; Prioritize unsupported Android 7.0 and 7.1.1 devices for replacement or isolation.; Use MDM to restrict untrusted or sideloaded applications where possible..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.