{"id":"CVE-2026-28597","published":"2026-11-02T20:17:41.907","lastModified":"2026-11-03T05:18:42.673","description":"In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-20"],"vendors":[],"products":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows a local attacker to bypass permission checks when granting URI access, enabling unauthorized read/write access to protected resources without user interaction or elevated privileges.","exploitability":"Exploitation requires local access to the device and knowledge of the vulnerable API; no additional privileges or user interaction are needed.","blast_radius":"Successful exploitation could lead to full compromise of local confidentiality, integrity, and availability for the affected device.","remediation":"Upgrade to Android version with patch level 2026-04-05 or later, as this vulnerability was fixed in that release.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["permission-bypass","local-privilege-escalation","android","cwe20"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:02:42.963Z"}}