CVE-2025-26425 in Androidinformação

Sumário

de VulDB • 07/06/2026

In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code. This could lead to local escalation of privilege on versions of Android where android.permission.MANAGE_DEFAULT_APPLICATIONS was not defined with no additional execution privileges needed. User interaction is not needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

Google Android

Reservar

10/02/2025

Divulgação

04/09/2025

Moderação

aceite

Entrada

VDB-322619

CPE

pronto

EPSS

0.00094

KEV

não

Atividades

muito baixo

Fontes

Want to know what is going to be exploited?

We predict KEV entries!