Skip to content
OpenAdvisories
High · 7.8 CVE-2026-28648 EUVD-2026-92630GHSA-w2mx-4m2p-6jwj

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no addit…

Published Oct 5, 2026 · Updated Oct 6, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16-qpr2, 16, 15, 14 —

References