Volerion logoVolerion
Volerion logoVolerion

Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

Android Device Policy Manager Privilege Escalation Vulnerability

Vulnerability

A logic error in the DevicePolicyManagerService can allow the addition of a Device Owner after provisioning. This vulnerability could lead to local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privileges being granted, potentially allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.

Added: Dec 8, 2025, 5:26 PM
Updated: Dec 8, 2025, 6:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
6.4
remediation
0.0
relevance
1.3
threat
8.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.