CVE-2026-28599

CVE-2026-28599 is an Intent Redirection Bypass in the addCreatorToken function of ActivityManagerService.java within the Android framework, caused by a logic error . It enables local privilege escalation with no additional execution privileges required and no user interaction needed. The vulnerab...

ASB-A-487147249

In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...