CVE-2026-28586

LowCVSS 3.3

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.06%

0th percentile - higher than 0% of all known CVEs

Summary

In multiple functions of AppOpsService.java, there is a missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed.

Risk Assessment

An attacker may access sensitive local information without user consent, compromising privacy.

Recommendation

Apply appropriate system patches provided by the vendor (e.g., Google).

Original NVD description (English source)

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.