CVE-2026-0065: Security vulnerability
Published Sep 8, 2026
·Updated
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 8, 2026
CVE Published
via MITRE·06:04 PM
Data Sourced
via MITRE·06:04 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker needs User execution privileges on the affected device. No user interaction is required once that level of execution is available.
2
What is the likely security impact?
Successful exploitation could allow a local attacker to escalate privileges by launching activities in the background through the affected logic.