CVE-2026-0016

A permissions bypass in the updateProvidersWhenServiceRemoved method of CredentialManagerService.java within the Android framework allows an attacker to override settings across users. This vulnerability can lead to local information disclosure without requiring additional execution privileges or...