CVE-2026-28641

In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • Published Oct 5, 2026
  • Not yet scored

Affected software

CVE-2026-28641 at the National Vulnerability Database