CVE-2026-0078

Published: Giu 02, 2026 Last Modified: Giu 02, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

https://source.android.com/docs/security/bulletin/2026/2026…
https://source.android.com/docs/security/bulletin/2026/2026-06-01