CVE-2026-28634

CVE-2026-28634 is a local privilege escalation vulnerability in the Android framework, specifically a logic error in the handleUssdRequest method of PhoneInterfaceManager.java that allows sending a USSD request without the required permission. The flaw requires no additional execution privileges ...