Denial of Service Vulnerability in Android's Device Policy Manager Service

CVE-2026-59008

What is CVE-2026-59008?

A vulnerability exists in the Device Policy Manager Service of Android that can allow an attacker to initiate a denial of service due to resource exhaustion. This occurs within the 'setApplicationRestrictions' functionality, where the exploitation can lead to a local denial of service situation without the need for additional execution privileges or user interaction. This issue signifies a potential risk for users and applications relying on this service, demanding immediate attention from Android device administrators and users.

References