Vulnerabilities

In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation.

In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google

Product

Android

Exposure class

Mobile OS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-58964 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 39
   CVE NVD 3h ago

   In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation.

   CVSS 8.4 CVE-2026-28597 Google