CVE-2016-3900

CVE-2016-3900 is a privilege escalation vulnerability in the ServiceManager component of Android versions 5.0.x, 5.1.x, 6.x, and 7.0. It arises from improper restrictions on service registration, allowing a crafted application to gain elevated privileges. The vulnerability has a CVSSv3 score of 7.8 (High), indicating a local attack vector with low attack complexity and requiring user interaction, but leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB. Community discussion is minimal, and there is no media coverage, suggesting low public awareness and limited exploitation.