In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
History
Wed, 11 Nov 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Android Key Import Logic Error Enables Local Privilege Escalation | |
| Weaknesses | CWE-284 |
Wed, 11 Nov 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| Vendors & Products |
Google
Google android |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Status: PUBLISHED
Assigner: Google_Devices
Published: 2026-11-10T19:20:10.794Z
Updated: 2026-11-10T19:20:10.794Z
Reserved: 2025-10-23T08:45:20.096Z
Link: CVE-2026-0175
No data.
Status : Awaiting Analysis
Published: 2026-11-10T20:17:20.517
Modified: 2026-11-10T21:46:32.023
Link: CVE-2026-0175
No data.
ReportizFlow