CVE-2026-0013 in Android
요약
\~에 의해 MITRE • 2026. 03. 02.
In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.