Path Traversal Vulnerability in Android's Profiling Service
CVE-2026-59016

Currently unrated

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
2 November 2026

What is CVE-2026-59016?

A path traversal vulnerability exists in the sendAnomalyProfile method of ProfilingService.java within Android. This flaw permits unauthorized local privilege escalation without requiring additional execution privileges or user interaction, making it a significant risk for Android devices. Attackers can exploit this vulnerability to access restricted files, potentially compromising sensitive data.

Affected Version(s)

Android 17

References

https://source.android.com/docs/security/bulletin/2026/20...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.