CVE-2026-0018: Input Validation
Published Jun 1, 2026
·Updated
In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
6 affected components
Google Android
Google Android=15.0
Google Android=16.0
Google Android=16.0-qpr2_beta_1
Google Android=16.0-qpr2_beta_2
Google Android=16.0-qpr2_beta_3
Event History
Jun 1, 2026
CVE Published
via MITRE·09:14 PM
Data Sourced
via MITRE·09:14 PM
DescriptionWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0018?
The severity of CVE-2026-0018 is medium with a CVSS score of 5.5.
2
What are the potential impacts of CVE-2026-0018?
CVE-2026-0018 can lead to a persistent local denial of service due to improper input validation.
3
How can I fix CVE-2026-0018?
To fix CVE-2026-0018, ensure that input validation is properly implemented in affected functions of AccessibilityManagerService.java.
4
Is user interaction required to exploit CVE-2026-0018?
No, user interaction is not needed for the exploitation of CVE-2026-0018.
5
What software is affected by CVE-2026-0018?
CVE-2026-0018 affects Google Android software.