All security reports
NVD security advisory

Security advisory for CVE-2026-28597

CVE-2026-28597

Full advisory details, affected packages, severity context, and original source.

Affected technology

CVE-2026-28597Java ecosystem

Advisory overview

In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account