← Database

CVE-2026-28586

LOW CVSS: 3.3 Published: 2026-06-01 Modified: 2026-07-22

Description

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Platforms

Google Android

Weakness Type

CWE-269

References