{"id":"CVE-2026-28582","title":"In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check","summary":"In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional …","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-862"],"vendor":"google","product":"android","affected":["android = 14.0","android = 15.0","android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:30:39.447","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28582","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00065,"epssPercentile":0.00017,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:14:16.108306Z"},"ingestedAt":"2026-09-08T19:08:49.643Z","slug":"CVE-2026-28582","body":"## Overview\n\nIn onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 14.0`\n- `android = 15.0`\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201493,"id":"CVE-2026-28582","ts":1789399510812,"field":"cvss","old":null,"new":"3.3"},{"seq":201492,"id":"CVE-2026-28582","ts":1789399510812,"field":"severity","old":"none","new":"low"},{"seq":200227,"id":"CVE-2026-28582","ts":1789397086206,"field":"cvss","old":"3.3","new":null},{"seq":200226,"id":"CVE-2026-28582","ts":1789397086206,"field":"severity","old":"low","new":"none"},{"seq":198151,"id":"CVE-2026-28582","ts":1789391738613,"field":"cvss","old":null,"new":"3.3"},{"seq":198150,"id":"CVE-2026-28582","ts":1789391738613,"field":"severity","old":"none","new":"low"},{"seq":195944,"id":"CVE-2026-28582","ts":1789383399300,"field":"cvss","old":"3.3","new":null},{"seq":195943,"id":"CVE-2026-28582","ts":1789383399300,"field":"severity","old":"low","new":"none"},{"seq":194873,"id":"CVE-2026-28582","ts":1789380300331,"field":"cvss","old":null,"new":"3.3"},{"seq":194872,"id":"CVE-2026-28582","ts":1789380300331,"field":"severity","old":"none","new":"low"},{"seq":193660,"id":"CVE-2026-28582","ts":1789378268825,"field":"cvss","old":"3.3","new":null},{"seq":193659,"id":"CVE-2026-28582","ts":1789378268825,"field":"severity","old":"low","new":"none"},{"seq":192447,"id":"CVE-2026-28582","ts":1789376233205,"field":"cvss","old":null,"new":"3.3"},{"seq":192446,"id":"CVE-2026-28582","ts":1789376233205,"field":"severity","old":"none","new":"low"},{"seq":191234,"id":"CVE-2026-28582","ts":1789373126521,"field":"cvss","old":"3.3","new":null},{"seq":191233,"id":"CVE-2026-28582","ts":1789373126521,"field":"severity","old":"low","new":"none"},{"seq":190019,"id":"CVE-2026-28582","ts":1789369120942,"field":"cvss","old":null,"new":"3.3"},{"seq":190018,"id":"CVE-2026-28582","ts":1789369120942,"field":"severity","old":"none","new":"low"},{"seq":188806,"id":"CVE-2026-28582","ts":1789368038266,"field":"cvss","old":"3.3","new":null},{"seq":188805,"id":"CVE-2026-28582","ts":1789368038266,"field":"severity","old":"low","new":"none"},{"seq":187589,"id":"CVE-2026-28582","ts":1789364996442,"field":"cvss","old":null,"new":"3.3"},{"seq":187588,"id":"CVE-2026-28582","ts":1789364996442,"field":"severity","old":"none","new":"low"},{"seq":186376,"id":"CVE-2026-28582","ts":1789363002299,"field":"cvss","old":"3.3","new":null},{"seq":186375,"id":"CVE-2026-28582","ts":1789363002299,"field":"severity","old":"low","new":"none"},{"seq":185162,"id":"CVE-2026-28582","ts":1789360969633,"field":"cvss","old":null,"new":"3.3"},{"seq":185161,"id":"CVE-2026-28582","ts":1789360969633,"field":"severity","old":"none","new":"low"},{"seq":183949,"id":"CVE-2026-28582","ts":1789357943323,"field":"cvss","old":"3.3","new":null},{"seq":183948,"id":"CVE-2026-28582","ts":1789357943323,"field":"severity","old":"low","new":"none"},{"seq":182201,"id":"CVE-2026-28582","ts":1789354097820,"field":"cvss","old":null,"new":"3.3"},{"seq":182200,"id":"CVE-2026-28582","ts":1789354097820,"field":"severity","old":"none","new":"low"},{"seq":180994,"id":"CVE-2026-28582","ts":1789352943275,"field":"cvss","old":"3.3","new":null},{"seq":180993,"id":"CVE-2026-28582","ts":1789352943275,"field":"severity","old":"low","new":"none"},{"seq":179787,"id":"CVE-2026-28582","ts":1789349998817,"field":"cvss","old":null,"new":"3.3"},{"seq":179786,"id":"CVE-2026-28582","ts":1789349998817,"field":"severity","old":"none","new":"low"},{"seq":178580,"id":"CVE-2026-28582","ts":1789347814232,"field":"cvss","old":"3.3","new":null},{"seq":178579,"id":"CVE-2026-28582","ts":1789347814232,"field":"severity","old":"low","new":"none"},{"seq":177373,"id":"CVE-2026-28582","ts":1789346180506,"field":"cvss","old":null,"new":"3.3"},{"seq":177372,"id":"CVE-2026-28582","ts":1789346180506,"field":"severity","old":"none","new":"low"},{"seq":176166,"id":"CVE-2026-28582","ts":1789342751912,"field":"cvss","old":"3.3","new":null},{"seq":176165,"id":"CVE-2026-28582","ts":1789342751912,"field":"severity","old":"low","new":"none"},{"seq":175950,"id":"CVE-2026-28582","ts":1789342358425,"field":"cvss","old":null,"new":"3.3"},{"seq":175949,"id":"CVE-2026-28582","ts":1789342358425,"field":"severity","old":"none","new":"low"},{"seq":175490,"id":"CVE-2026-28582","ts":1789338389927,"field":"cvss","old":"3.3","new":null},{"seq":175489,"id":"CVE-2026-28582","ts":1789338389927,"field":"severity","old":"low","new":"none"},{"seq":174285,"id":"CVE-2026-28582","ts":1789334603294,"field":"cvss","old":null,"new":"3.3"},{"seq":174284,"id":"CVE-2026-28582","ts":1789334603294,"field":"severity","old":"none","new":"low"},{"seq":173080,"id":"CVE-2026-28582","ts":1789333197339,"field":"cvss","old":"3.3","new":null},{"seq":173079,"id":"CVE-2026-28582","ts":1789333197339,"field":"severity","old":"low","new":"none"},{"seq":171894,"id":"CVE-2026-28582","ts":1789330883097,"field":"cvss","old":null,"new":"3.3"},{"seq":171893,"id":"CVE-2026-28582","ts":1789330883097,"field":"severity","old":"none","new":"low"}]}