← Back to browse · API

CVE-2026-28573

Severity
CRITICAL
CVSS
10.0
EPSS
0.00138
Risk score
40.05
CISA KEV
No
PoC
No
Published
2026-06-18
Modified
2026-06-22
First seen
2026-08-07
Aliases
EUVD-2026-37857, GHSA-VJ42-43CH-3XP2
Products
Google:Android 14, Google:Android 16
Sources
euvd EUVD-2026-37857

Description

In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References