wmsha/streing

Allows an application to retrieve the window token. Malicious apps may perfrom unauthorized interaction with the application window impersonating the system.

retrieve frame statistics

Allows an application to collect frame statistics. Malicious apps may observe the frame statistics of windows from other apps.

filter events

Allows an application to register an input filter which filters the stream of all user events before they are dispatched. Malicious app may control the system UI whtout user intervention.

partial shutdown

Puts the activity manager into a shutdown state. Does not perform a complete shutdown.

prevent app switches

Prevents the user from switching to another app.

get current app info

Allows the holder to retrieve private information about the current application in the foreground of the screen.

monitor and control all app launching

Allows the app to monitor and control how the system launches activities. Malicious apps may completely compromise the system. This permission is only needed for development, never for normal use.

send package removed broadcast

Allows the app to broadcast a notification that an app package has been removed. Malicious apps may use this to kill any other running app.

send SMS-received broadcast

Allows the app to broadcast a notification that an SMS message has been received. Malicious apps may use this to forge incoming SMS messages.

send WAP-PUSH-received broadcast

Allows the app to broadcast a notification that a WAP PUSH message has been received. Malicious apps may use this to forge MMS message receipt or to silently replace the content of any webpage with malicious variants.

send score networks broadcast