CVE-2026-0086: Medium severity Google Android vulnerability
Published Jun 1, 2026
·Updated
In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
3 affected components
Google Android=16.0-qpr2_beta_1
Google Android=16.0-qpr2_beta_2
Google Android=16.0-qpr2_beta_3
Event History
Jun 1, 2026
CVE Published
via MITRE·09:14 PM
Data Sourced
via MITRE·09:14 PM
DescriptionWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0086?
CVE-2026-0086 has a medium severity rating of 6.8 on the CVSS scale.
2
How do I fix CVE-2026-0086?
To mitigate CVE-2026-0086, ensure that the affected software is updated to the latest version provided by Google Android.
3
What are the potential impacts of CVE-2026-0086?
CVE-2026-0086 can lead to local escalation of privilege, allowing unauthorized access to supervision data.
4
Is user interaction required to exploit CVE-2026-0086?
No, user interaction is not needed to exploit CVE-2026-0086.
5
What type of vulnerability is CVE-2026-0086?
CVE-2026-0086 is a local privilege escalation vulnerability due to a missing null check.