CVE-2026-28640

A permission bypass exists in the checkCallerIsCertInstallerOrSelfInProfile method of CredentialStorageActivity.java due to improper input validation. This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. No specific rem...