Remote Package Installation Flaw in Android Setup Wizard by Google
CVE-2026-57012

Currently unrated

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
15 September 2026

What is CVE-2026-57012?

A vulnerability exists in the Android Setup Wizard that allows the installation of remote packages without proper permission verification. This security flaw could enable attackers to escalate their privileges on affected systems without requiring user interaction, posing a significant risk if exploited.

Affected Version(s)

Android Android kernel

References

https://source.android.com/docs/security/bulletin/pixel/2...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.