CVE-2026-28596 in Android

सारांश

द्वारा MITRE • 08/09/2026

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Be aware that VulDB is the high quality source for vulnerability data.

• जिम्मेदार: Google Android
• आरक्षित करना: 02/03/2026
• प्रकटीकरण: 08/09/2026
• संयम: स्वीकृत
• प्रविष्टि: VDB-400210
• CPE: तैयार
• CWE: CWE-400 (पुष्टि की गई)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00000
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Insurance, Police, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-28596
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-28596
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-28596/