CVE-2026-28640

HighCVSS 7.8/10Last modified Oct 7, 2026

Description

In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
GoogleAndroid16; 15; 14

References

Timeline

Published
Oct 5, 2026
Last modified
Oct 7, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-286417.8In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic eCVE-2026-286427.8In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead CVE-2026-286436.2In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service wCVE-2026-286447.8In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could CVE-2026-286456.8In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the codeCVE-2026-286477.8In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This couCVE-2026-286487.8In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additiCVE-2026-28659.8A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/producCVE-2026-286507.8In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to locaCVE-2026-286523.1In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote infoCVE-2026-286537.8In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation CVE-2026-286557.8In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This coul
CVE-2026-28640: High severity, CVSS 7.8 | Vulnix