CVE-2026-28603

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the `assertSafeToStartCustomActivity` function in the `AppRestrictionsFragment.java` file of the Android operating system allows a violator to elevate their privileges.

The vulnerability of the assertSafeToStartCustomActivity function in the AppRestrictionsFragment.java file of the Android operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to gain increased privileges...

Privilege escalation

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...