Logic Error in ExpandableNotificationRow Leading to Data Exposure in Android System
CVE-2026-0012

6.2MEDIUM

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
2 March 2026

What is CVE-2026-0012?

A logic error in the setHideSensitive method of ExpandableNotificationRow.java in the Android system could lead to unintended disclosure of contact names. This issue enables local information exposure without requiring elevated execution privileges or user interaction. As a result, sensitive information may be accessible to unauthorized users, underscoring the importance of applying the latest security patches and safeguarding personal data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android 16

Android 15

Android 14

References

https://source.android.com/docs/security/bulletin/2026/20...
vendor-advisory

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.