7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Basic Information
ID
CVE-2026-0094
Source
google_android
Published
Jun 1, 2026 at 21:14
Modified
Jun 1, 2026 at 22:59
Affected Product
Vendor
Google
Product
Android
Version
16-qpr2
Affected Versions
Google Android 16-qpr2
Google Android 16
Google Android 15
Google Android 14
Google Android 16
Google Android 15
Google Android 14