CVE-2026-49883: Critical severity Unknown PermissionsManager vulnerability
Published Sep 8, 2026
·Updated
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected component
Unknown PermissionsManager
Event History
Sep 8, 2026
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
Description
Data Sourced
via NVD·08:17 PM
DescriptionSeverity