{"id":"CVE-2026-45524","published":"2026-10-05T19:17:20.533","lastModified":"2026-10-07T13:05:04.523","description":"In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-10-01","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw in WifiPermissionsUtil.java allows for a local privilege escalation due to a missing permission check, potentially enabling an attacker to gain higher privileges without additional execution rights.","exploitability":"Exploitation requires local access and the absence of a proper permission check, making it moderately easy for an attacker with local user rights.","blast_radius":"If exploited, the impact could be significant, as it allows for local escalation of privilege, potentially leading to full system control.","remediation":"Upgrade to the latest version of the affected software, ensuring all security patches are applied.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["local-priv-escal","permission-check","wifi","java"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:45:08.600Z"}}