10
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Description
In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
AI Analysis
SQL injection vulnerability in Contacts Provider leading to local information disclosure
Basic Information
ID
CVE-2026-28576
Source
google_android
Published
Jun 17, 2026 at 07:19
Affected Product
Vendor
Android
Product
Android
Version
17
Affected Versions
Android Android 17
AI Assessment
AI Score
10 / 10
AI Severity
Critical
Vendor
Google
Product
Android
Version
17