Local Privilege Escalation Vulnerability in Android Products

CVE-2026-0086

What is CVE-2026-0086?

In specific Android environments, a flaw exists in the onCreate method of the DisableSupervisionActivity.kt file, allowing unauthorized deletion of supervision data due to a lack of a necessary null check. This vulnerability could enable local privilege escalation without requiring any additional execution privileges, making it easier for attackers to exploit it without user interaction.

References