CVE-2026-28615: Critical severity Google Android Telecom vulnerability
Published Jun 17, 2026
·Updated
In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
2 affected components
Google Android Telecom
Google Android=17.0
Event History
Jun 17, 2026
CVE Published
via MITRE·07:17 AM
Data Sourced
via MITRE·07:17 AM
DescriptionWeakness
Data Sourced
via NVD·01:20 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-28615?
CVE-2026-28615 has a critical severity rating of 10.
2
How do I fix CVE-2026-28615?
To fix CVE-2026-28615, ensure that you update Google Android Telecom to the latest version that addresses this vulnerability.
3
What could be the impact of CVE-2026-28615?
The impact of CVE-2026-28615 includes unauthorized phone calls and local escalation of privilege.
4
Is user interaction required to exploit CVE-2026-28615?
No, user interaction is not needed for exploitation of CVE-2026-28615.
5
Which software is affected by CVE-2026-28615?
CVE-2026-28615 affects Google Android Telecom and Google Android.