CVE 10 CRITICAL

CVE-2026-28576_CVE-2026-28576

10 / 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Analysis

SQL injection vulnerability in Contacts Provider leading to local information disclosure

Basic Information

ID CVE-2026-28576
Source google_android
Published Jun 17, 2026 at 07:19

Affected Product

Vendor Android
Product Android
Version 17
Affected Versions Android Android 17

AI Assessment

AI Score 10 / 10
AI Severity Critical
Vendor Google
Product Android
Version 17

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.