CVE-2026-28636

CVE-2026-28636 is a confused deputy vulnerability in the setupLayout method of PickActivity.java within Android. It allows a bypass of the "Install unknown apps" security restriction, leading to local escalation of privilege with no additional execution privileges required and no user interaction...