CVE-2026-0017
published 2026-03-02CVE-2026-0017: In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local…
PriorityP343high7.7CVSS 3.1
AVLACLPRNUINSUCHIHAN
EPSS
0.10%
0.9th percentile
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | frameworks_base | >= 16-qpr2-next:0 < 16-qpr2-next:2026-03-01 | 16-qpr2-next:2026-03-01 |
| platform | frameworks_base | >= 16-qpr2:0 < 16-qpr2:2026-03-01 | 16-qpr2:2026-03-01 |
| platform | frameworks_base | >= 16:0 < 16:2026-03-01 | 16:2026-03-01 |
| platform | packages_apps_settings | >= 16-qpr2-next:0 < 16-qpr2-next:2026-03-01 | 16-qpr2-next:2026-03-01 |
| platform | packages_apps_settings | >= 16-qpr2:0 < 16-qpr2:2026-03-01 | 16-qpr2:2026-03-01 |
| platform | packages_apps_settings | >= 16:0 < 16:2026-03-01 | 16:2026-03-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7332-r538-h7hp: In onChange of BiometricService
ghsa_unreviewed·2026-03-02
CVE-2026-0017 [HIGH] CWE-285 GHSA-7332-r538-h7hp: In onChange of BiometricService
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2026-0017: In onChange of BiometricService
osv·2026-03-01
CVE-2026-0017 CVE-2026-0017: In onChange of BiometricService
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-0017 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.7
CVE-2026-0017 [HIGH] CVE-2026-0017 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-0017 :
NixOS vulnerability analysis and mitigation
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Source : NVD
## 7.7
Score
Published March 2, 2026
Severity HIGH
CNA Score 7.7
Affected Technologies
NixOS
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 0.1
Exploitation Probability (EPSS) N/A
Affected packages and libraries
android
Sources
NVD
Nix Severity HIGH No Fix Added at: Mar 04, 2026
## Get a CVE risk assessment
Get a prioritized view of C
Bugzilla
CVE-2026-58336 moodle: IDOR allows arbitrary comment deletion [fedora-all]
bugzilla·2026-07-29
CVE-2026-58336 [MEDIUM] CVE-2026-58336 moodle: IDOR allows arbitrary comment deletion [fedora-all]
CVE-2026-58336 moodle: IDOR allows arbitrary comment deletion [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
MSA-26-0017: IDOR allows arbitrary comment deletion
Description: Additional checks were required to ensure users with the
capability to delete comments can only do so in the
contexts where they have the permission.
Issue summary: IDOR allows arbitrary comment deletion
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.3, 5.0 to 5.0.6, 4.5 to 4.5.10 and earlier
unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: Paul Holden
Issue no.: MDL-88619
Bugzilla
CVE-2026-58336 moodle: IDOR allows arbitrary comment deletion
bugzilla·2026-06-30
CVE-2026-58336 [MEDIUM] CVE-2026-58336 moodle: IDOR allows arbitrary comment deletion
CVE-2026-58336 moodle: IDOR allows arbitrary comment deletion
MSA-26-0017: IDOR allows arbitrary comment deletion
Description: Additional checks were required to ensure users with the
capability to delete comments can only do so in the
contexts where they have the permission.
Issue summary: IDOR allows arbitrary comment deletion
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.3, 5.0 to 5.0.6, 4.5 to 4.5.10 and earlier
unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: Paul Holden
Issue no.: MDL-88619
2026-03-02
Published