CVE-2026-28657

CVE-2026-28657 is a local escalation of privilege vulnerability in Android , specifically in the onActivityResult method of AppWidgetConfigActivityProxy.java. The root cause is a confused deputy flaw that allows an unauthorized URI permission grant . Exploitation requires only low privileges, no ...