CVE-2026-28647

In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • Published Oct 5, 2026
  • Not yet scored

Affected software

CVE-2026-28647 at the National Vulnerability Database