Medium · 4.4 CVE-2026-0183 EUVD-2026-79150GHSA-67jr-3r4p-2h34

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System ex…

Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by Google_Devices

Vendor: Google Product: Android Platform: Android

Description

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	Android kernel	—

Advisories 1

WID-SEC-2026-3407 Pixel Patchday September 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 15, 2026

References

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01