CVE-2026-28606

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.8
EPSS: 0.3%
CWE: CWE-287
KEV Durumu: Hayır

Yayım tarihi: 8 Eylül 2026

Etkilenen: google android

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.

Referanslar

https://source.android.com/docs/security/bulletin/2026/2026-09-01

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.