CVE-2026-0094 in Androidinformação

Sumário

de MITRE • 02/06/2026

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

Google Android

Reservar

15/10/2025

Divulgação

02/06/2026

Moderação

aceite

Entrada

VDB-367874

CPE

pronto

EPSS

0.00003

KEV

não

Atividades

muito baixo

Sector

Finance, Police, ...

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-0094
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-0094
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-0094/

◂ VoltarVisão GeralPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!