← Zurück zur CVE-Suche

CVE-2026-0088

Android

Beschreibung

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 7.8EPSS 0.079%Risiko 0.79
Quelle öffnen
Veröffentlicht
2026-06-01 22:16:22
Betroffene Versionen
unknown
Typ
Core software
Zuletzt geändert
2026-07-22 17:10:00
Vektor
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H