CVE-2026-28644 in Androidinfo

Zusammenfassung

von MITRE • 08.09.2026

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Zuständig

Google Android

Reservieren

02.03.2026

Veröffentlichung

08.09.2026

Moderieren

akzeptiert

Eintrag

VDB-400259

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!