{"vulnerability": "CVE-2026-0016", "sightings": [{"uuid": "9fd3d838-0ca4-46bb-8f33-ac3473fc961f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0016", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "65961db2-7e57-4976-a33a-08d1543bedfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0016", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwsekx4ktd25", "content": "CVE-2026-0016 and CVE-2026-0017 affect Google Android 16 and 16-qpr2: a CredentialManager permissions bypass (local info disclosure) and a BiometricService logic flaw (local privilege escalation). No exploitation reported. Apply the Android update.", "creation_timestamp": "2026-10-01T07:47:49.222625Z"}]}