Permission Bypass Vulnerability in Android and Related Products
CVE-2026-59015

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-59015?

A permission bypass vulnerability has been identified in the Android Operating System, where certain processes may be exploited due to a confused deputy scenario. This flaw allows unauthorized access, potentially leading to local information disclosure without requiring additional execution privileges or user interaction. It’s critical for users of affected Android versions to ensure their systems are updated to mitigate any associated risks.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.