CVE-2026-0034

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Mar 2, 2026
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-00358.4In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic erCVE-2026-00367.8In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to locaCVE-2026-00378.4In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation CVE-2026-00388.4In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead CVE-2026-00396.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This couldCVE-2026-00406.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toCVE-2026-00416.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remoteCVE-2026-00425.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This couldCVE-2026-00435.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This couldCVE-2026-00446.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This cCVE-2026-00457.8In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. TCVE-2026-00466.2In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attac
CVE-2026-0034: High severity, CVSS 8.4 | Vulnix