CVE-2026-49887

A permissions bypass in the maybeRemoveInvalidInstallerPackageName function of InstallRepository.kt allows for unauthorized app updates. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. This issue is addressed in...

CVE-2026-49887

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the performPreInstallChecks() function in the InstallRepository.kt script of the Android operating system’s Framework component allows a malicious actor to escalate their privileges.

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...