CVE-2026-28636

In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28636

CVE-2026-28636 is a confused deputy vulnerability in the setupLayout method of PickActivity.java within Android. It allows a bypass of the "Install unknown apps" security restriction, leading to local escalation of privilege with no additional execution privileges required and no user interaction...