CVE-2026-59028

HIGH · 8.4 CVSS Gepubliceerd: 02-11-2026 CWE-441

Beschrijving

In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendors

Google

Affected products

Android

References

source.android.com