Permission Bypass Vulnerability in Android Products by Google

CVE-2026-59004

What is CVE-2026-59004?

A potential permission bypass vulnerability exists in various Android products due to an uncaught exception in multiple locations. This flaw can enable local escalation of privileges without requiring additional execution permissions, making it exploitable without any user interaction. This situation poses significant security risks, as attackers could leverage this vulnerability to gain unauthorized access to sensitive data or system functions.

References