CVE-2025-22426

HighCVSS 7.8/10Last modified Jul 22, 2026

Description

In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2026
Last modified
Jul 22, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-224277.3In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due tCVE-2025-224287.8In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user frCVE-2025-224299.8In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalatiCVE-2025-22437.3A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic usCVE-2025-224305.5In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This cCVE-2025-224315.5In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due CVE-2025-224326.7In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could leCVE-2025-224337.8In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work ProfCVE-2025-224347.8In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could leaCVE-2025-224359.8In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of CVE-2025-224377.8In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in CVE-2025-224387.8In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privi
CVE-2025-22426: High severity, CVSS 7.8 | Vulnix