Google · Android · CVE-2016-6708
**Name of the Vulnerable Software and Affected Versions**
Android versions prior to 2016-11-01 patch
**Description**
The issue concerns an elevation of privilege in the System UI, allowing a local malicious user to bypass the security prompt of a work profile in Multi-Window mode. This is considered a local bypass of user interaction requirements for any developer or security setting modifications.
**Recommendations**
For Android versions prior to 2016-11-01 patch, apply the patch released on or after 2016-11-01 to resolve the issue.