UNKNOWN NVD

CVE-2026-28640

In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This cou

In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01

Published: 2026-10-05 · Source: NVD · Feed updated: 2026-10-06

This unknown severity vulnerability was published on 2026-10-05 via NVD.

vulnfeed aggregates 7729 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.