CVE-2026-0075

CVE-2026-0075 ContactsProvider 研究用 PoC 管理されたラボ環境向けの Android 研究プロトタイプで、ContactsProvider2 における CVE-2026-0075 に関連する観察可能な挙動を評価するためのものです。 概要 CVE-2026-0075 は、ContactsProvider2 における Android のローカル権限昇格の問題です。公開アドバイザリは、ユーザーの操作なしに SQL インジェクションを通じて連絡先データベースへアクセスする可能性のある経路を説明しています。Android はこの問題を High...

CVE-2026-28576

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-33791

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0075

A local elevation-of-privilege vulnerability exists in Android's ContactsProvider2 component. Multiple functions are susceptible to SQL injection , which could allow an attacker to access the contacts database without requiring additional execution privileges or user interaction. Affected AOSP ve...

ASB-A-465133716

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-45585

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An issue exists in multiple functions where a SQL injection allows unauthorized access to the contacts database. This can lead to local escalation of privilege without requiring additional...

CVE-2026-0075: Improper Neutralization of Special Elements used in an SQL Command

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...