{"id":"CVE-2026-28641","published":"2026-10-05T19:17:20.073","lastModified":"2026-10-07T13:08:22.517","description":"In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows local privilege escalation by bypassing permission checks in Android's application management UI, potentially enabling attackers to uninstall system applications without proper authorization.","exploitability":"Exploitation is straightforward requiring only local access with user privileges, no additional execution privileges or user interaction needed for the attack to succeed.","blast_radius":"The impact could be significant across all Android devices where this permission bypass exists, potentially allowing attackers to remove critical system applications and compromise device integrity.","remediation":"Upgrade to Android 14.0.0.0 (API level 34) or later, which contains the fixed version of ApplicationActionButtonsPreferenceController.java","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","permission-bypass","android"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:58:05.239Z"}}