{"id":"CVE-2026-28612","title":"In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code","summary":"In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-693"],"vendor":"google","product":"android","affected":["android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:17:47.540","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28612","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00078,"epssPercentile":0.00168,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:57:10.484196Z"},"ingestedAt":"2026-09-08T19:08:49.643Z","slug":"CVE-2026-28612","body":"## Overview\n\nIn resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201525,"id":"CVE-2026-28612","ts":1789399510911,"field":"cvss","old":null,"new":"7.8"},{"seq":201524,"id":"CVE-2026-28612","ts":1789399510911,"field":"severity","old":"none","new":"high"},{"seq":200259,"id":"CVE-2026-28612","ts":1789397086318,"field":"cvss","old":"7.8","new":null},{"seq":200258,"id":"CVE-2026-28612","ts":1789397086318,"field":"severity","old":"high","new":"none"},{"seq":198183,"id":"CVE-2026-28612","ts":1789391740968,"field":"cvss","old":null,"new":"7.8"},{"seq":198182,"id":"CVE-2026-28612","ts":1789391740968,"field":"severity","old":"none","new":"high"},{"seq":195976,"id":"CVE-2026-28612","ts":1789383399406,"field":"cvss","old":"7.8","new":null},{"seq":195975,"id":"CVE-2026-28612","ts":1789383399406,"field":"severity","old":"high","new":"none"},{"seq":194905,"id":"CVE-2026-28612","ts":1789380300432,"field":"cvss","old":null,"new":"7.8"},{"seq":194904,"id":"CVE-2026-28612","ts":1789380300432,"field":"severity","old":"none","new":"high"},{"seq":193692,"id":"CVE-2026-28612","ts":1789378268944,"field":"cvss","old":"7.8","new":null},{"seq":193691,"id":"CVE-2026-28612","ts":1789378268944,"field":"severity","old":"high","new":"none"},{"seq":192479,"id":"CVE-2026-28612","ts":1789376233319,"field":"cvss","old":null,"new":"7.8"},{"seq":192478,"id":"CVE-2026-28612","ts":1789376233319,"field":"severity","old":"none","new":"high"},{"seq":191266,"id":"CVE-2026-28612","ts":1789373126633,"field":"cvss","old":"7.8","new":null},{"seq":191265,"id":"CVE-2026-28612","ts":1789373126633,"field":"severity","old":"high","new":"none"},{"seq":190051,"id":"CVE-2026-28612","ts":1789369121061,"field":"cvss","old":null,"new":"7.8"},{"seq":190050,"id":"CVE-2026-28612","ts":1789369121061,"field":"severity","old":"none","new":"high"},{"seq":188838,"id":"CVE-2026-28612","ts":1789368038377,"field":"cvss","old":"7.8","new":null},{"seq":188837,"id":"CVE-2026-28612","ts":1789368038377,"field":"severity","old":"high","new":"none"},{"seq":187621,"id":"CVE-2026-28612","ts":1789364996540,"field":"cvss","old":null,"new":"7.8"},{"seq":187620,"id":"CVE-2026-28612","ts":1789364996540,"field":"severity","old":"none","new":"high"},{"seq":186408,"id":"CVE-2026-28612","ts":1789363002405,"field":"cvss","old":"7.8","new":null},{"seq":186407,"id":"CVE-2026-28612","ts":1789363002405,"field":"severity","old":"high","new":"none"},{"seq":185194,"id":"CVE-2026-28612","ts":1789360969731,"field":"cvss","old":null,"new":"7.8"},{"seq":185193,"id":"CVE-2026-28612","ts":1789360969731,"field":"severity","old":"none","new":"high"},{"seq":183981,"id":"CVE-2026-28612","ts":1789357943430,"field":"cvss","old":"7.8","new":null},{"seq":183980,"id":"CVE-2026-28612","ts":1789357943430,"field":"severity","old":"high","new":"none"},{"seq":182233,"id":"CVE-2026-28612","ts":1789354097919,"field":"cvss","old":null,"new":"7.8"},{"seq":182232,"id":"CVE-2026-28612","ts":1789354097919,"field":"severity","old":"none","new":"high"},{"seq":181026,"id":"CVE-2026-28612","ts":1789352943400,"field":"cvss","old":"7.8","new":null},{"seq":181025,"id":"CVE-2026-28612","ts":1789352943400,"field":"severity","old":"high","new":"none"},{"seq":179819,"id":"CVE-2026-28612","ts":1789350001106,"field":"cvss","old":null,"new":"7.8"},{"seq":179818,"id":"CVE-2026-28612","ts":1789350001106,"field":"severity","old":"none","new":"high"},{"seq":178612,"id":"CVE-2026-28612","ts":1789347814342,"field":"cvss","old":"7.8","new":null},{"seq":178611,"id":"CVE-2026-28612","ts":1789347814342,"field":"severity","old":"high","new":"none"},{"seq":177405,"id":"CVE-2026-28612","ts":1789346181734,"field":"cvss","old":null,"new":"7.8"},{"seq":177404,"id":"CVE-2026-28612","ts":1789346181734,"field":"severity","old":"none","new":"high"},{"seq":176198,"id":"CVE-2026-28612","ts":1789342752031,"field":"cvss","old":"7.8","new":null},{"seq":176197,"id":"CVE-2026-28612","ts":1789342752031,"field":"severity","old":"high","new":"none"},{"seq":175982,"id":"CVE-2026-28612","ts":1789342358534,"field":"cvss","old":null,"new":"7.8"},{"seq":175981,"id":"CVE-2026-28612","ts":1789342358534,"field":"severity","old":"none","new":"high"},{"seq":175522,"id":"CVE-2026-28612","ts":1789338390034,"field":"cvss","old":"7.8","new":null},{"seq":175521,"id":"CVE-2026-28612","ts":1789338390034,"field":"severity","old":"high","new":"none"},{"seq":174317,"id":"CVE-2026-28612","ts":1789334604785,"field":"cvss","old":null,"new":"7.8"},{"seq":174316,"id":"CVE-2026-28612","ts":1789334604785,"field":"severity","old":"none","new":"high"},{"seq":173112,"id":"CVE-2026-28612","ts":1789333197448,"field":"cvss","old":"7.8","new":null},{"seq":173111,"id":"CVE-2026-28612","ts":1789333197448,"field":"severity","old":"high","new":"none"},{"seq":171926,"id":"CVE-2026-28612","ts":1789330884501,"field":"cvss","old":null,"new":"7.8"},{"seq":171925,"id":"CVE-2026-28612","ts":1789330884501,"field":"severity","old":"none","new":"high"}]}