CVE-2026-28643: google android

CVSS 6.2 (medium) · published 2026-11-02

In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products (NVD): google android

Weakness: CWE-20

Source: NVD CVE-2026-28643

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.