← Zurück zur CVE-Suche

CVE-2026-0078

Android

Beschreibung

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 7.8EPSS 0.079%Risiko 0.79
Quelle öffnen
Veröffentlicht
2026-06-01 22:16:21
Betroffene Versionen
unknown
Typ
Core software
Zuletzt geändert
2026-07-22 17:10:00
Vektor
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H