CVE-2025-26462
Description
In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CWE
- CWE-269 — CWE-269 Improper Privilege Management
Affected
- Google / Android — v=15 [affected]; v=14 [affected]; v=13 [affected]
CVSS
- (none)
References
- https://android.googlesource.com/platform/frameworks/base/+/7076b2b2bd3cceea45f5d3dfa5ee279da819c9e1
- https://source.android.com/security/bulletin/2025-06-01
Source
cvelistV5-main/cves/2025/26xxx/CVE-2025-26462.json