Skip to content
OpenAdvisories
High · 8.4 CVE-2026-55287 EUVD-2026-115575GHSA-8cj5-xw53-7gp8

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to …

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15, 14 —

Advisories 2

References