CVE-2026-0013

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0013

A confused deputy vulnerability exists in the setupLayout method of PickActivity.java within the Android DocumentsUI component. This flaw allows an attacker to start any activity as a DocumentsUI app, potentially leading to local escalation of privilege without requiring additional execution priv...

ASB-A-447135012

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...