CVE-2026-0034

creationtimestamp| type| source ---|---|--- 2026-03-02 20:03:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg42ei62jp2e 2026-03-02 22:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4avrkmmv2c...

CVE-2026-0034

In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...