Local Privilege Escalation Vulnerability in Android Host Emulation Manager

CVE-2026-0099

What is CVE-2026-0099?

A local privilege escalation vulnerability exists in the Host Emulation Manager of Android, specifically within the onNullBinding function. This flaw arises from a logic error that allows an activity to be launched from the background. Although exploitation requires user interaction, the vulnerability does not necessitate additional execution privileges, making it a significant concern for device security. Users are advised to apply the latest security updates to mitigate potential risks associated with this vulnerability.

References