CVE-2026-28584 in Androidinformación

Resumen

por MITRE • 2026-09-08

In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Google Android

Reservar

2026-03-02

Divulgación

2026-09-08

Moderación

aceptado

Artículo

VDB-400214

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Lawfirm, Insurance, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-28584
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28584
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-28584/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!