HIGHCVE-2026-0034Published Modified CNA google_android
CVE-2026-0034: In setPackageOrComponentEnabled of ManagedServices
In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
- CVSS v3.1
- 8.4
- Severity
- HIGH
- Fixed in
- —
- Affected Products
- 1
Affected packages
- Google / Android16-qpr2 · 16 · 15 · 14
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HReferences