CVE-2026-49887

CVE-2026-49887 affects Android and resides in the maybeRemoveInvalidInstallerPackageName method of InstallRepository.kt . The root cause is a permissions bypass that permits an unauthorized app update , enabling local privilege escalation without additional execution privileges and without user i...

The vulnerability of the performPreInstallChecks() function in the InstallRepository.kt script of the Android operating system’s Framework component allows a malicious actor to escalate their privileges.

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...