{"id":"CVE-2026-28626","title":"In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection ","summary":"In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interact…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-601"],"vendor":"google","product":"android","affected":["android = 14.0","android = 15.0","android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:08:02.077","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28626","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00066,"epssPercentile":0.00024,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:57:16.201747Z"},"ingestedAt":"2026-09-08T19:08:49.642Z","slug":"CVE-2026-28626","body":"## Overview\n\nIn onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.\n\n## Affected\n\n- `android = 14.0`\n- `android = 15.0`\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201545,"id":"CVE-2026-28626","ts":1789399510972,"field":"cvss","old":null,"new":"7.3"},{"seq":201544,"id":"CVE-2026-28626","ts":1789399510972,"field":"severity","old":"none","new":"high"},{"seq":200279,"id":"CVE-2026-28626","ts":1789397086389,"field":"cvss","old":"7.3","new":null},{"seq":200278,"id":"CVE-2026-28626","ts":1789397086389,"field":"severity","old":"high","new":"none"},{"seq":198203,"id":"CVE-2026-28626","ts":1789391742424,"field":"cvss","old":null,"new":"7.3"},{"seq":198202,"id":"CVE-2026-28626","ts":1789391742424,"field":"severity","old":"none","new":"high"},{"seq":195996,"id":"CVE-2026-28626","ts":1789383399479,"field":"cvss","old":"7.3","new":null},{"seq":195995,"id":"CVE-2026-28626","ts":1789383399479,"field":"severity","old":"high","new":"none"},{"seq":194925,"id":"CVE-2026-28626","ts":1789380300497,"field":"cvss","old":null,"new":"7.3"},{"seq":194924,"id":"CVE-2026-28626","ts":1789380300497,"field":"severity","old":"none","new":"high"},{"seq":193712,"id":"CVE-2026-28626","ts":1789378269015,"field":"cvss","old":"7.3","new":null},{"seq":193711,"id":"CVE-2026-28626","ts":1789378269015,"field":"severity","old":"high","new":"none"},{"seq":192499,"id":"CVE-2026-28626","ts":1789376233393,"field":"cvss","old":null,"new":"7.3"},{"seq":192498,"id":"CVE-2026-28626","ts":1789376233393,"field":"severity","old":"none","new":"high"},{"seq":191286,"id":"CVE-2026-28626","ts":1789373126701,"field":"cvss","old":"7.3","new":null},{"seq":191285,"id":"CVE-2026-28626","ts":1789373126701,"field":"severity","old":"high","new":"none"},{"seq":190071,"id":"CVE-2026-28626","ts":1789369121133,"field":"cvss","old":null,"new":"7.3"},{"seq":190070,"id":"CVE-2026-28626","ts":1789369121133,"field":"severity","old":"none","new":"high"},{"seq":188858,"id":"CVE-2026-28626","ts":1789368038443,"field":"cvss","old":"7.3","new":null},{"seq":188857,"id":"CVE-2026-28626","ts":1789368038443,"field":"severity","old":"high","new":"none"},{"seq":187641,"id":"CVE-2026-28626","ts":1789364996599,"field":"cvss","old":null,"new":"7.3"},{"seq":187640,"id":"CVE-2026-28626","ts":1789364996599,"field":"severity","old":"none","new":"high"},{"seq":186428,"id":"CVE-2026-28626","ts":1789363002482,"field":"cvss","old":"7.3","new":null},{"seq":186427,"id":"CVE-2026-28626","ts":1789363002482,"field":"severity","old":"high","new":"none"},{"seq":185214,"id":"CVE-2026-28626","ts":1789360969792,"field":"cvss","old":null,"new":"7.3"},{"seq":185213,"id":"CVE-2026-28626","ts":1789360969792,"field":"severity","old":"none","new":"high"},{"seq":184001,"id":"CVE-2026-28626","ts":1789357943499,"field":"cvss","old":"7.3","new":null},{"seq":184000,"id":"CVE-2026-28626","ts":1789357943499,"field":"severity","old":"high","new":"none"},{"seq":182253,"id":"CVE-2026-28626","ts":1789354097982,"field":"cvss","old":null,"new":"7.3"},{"seq":182252,"id":"CVE-2026-28626","ts":1789354097982,"field":"severity","old":"none","new":"high"},{"seq":181046,"id":"CVE-2026-28626","ts":1789352943479,"field":"cvss","old":"7.3","new":null},{"seq":181045,"id":"CVE-2026-28626","ts":1789352943479,"field":"severity","old":"high","new":"none"},{"seq":179839,"id":"CVE-2026-28626","ts":1789350001178,"field":"cvss","old":null,"new":"7.3"},{"seq":179838,"id":"CVE-2026-28626","ts":1789350001178,"field":"severity","old":"none","new":"high"},{"seq":178632,"id":"CVE-2026-28626","ts":1789347814414,"field":"cvss","old":"7.3","new":null},{"seq":178631,"id":"CVE-2026-28626","ts":1789347814414,"field":"severity","old":"high","new":"none"},{"seq":177425,"id":"CVE-2026-28626","ts":1789346181793,"field":"cvss","old":null,"new":"7.3"},{"seq":177424,"id":"CVE-2026-28626","ts":1789346181793,"field":"severity","old":"none","new":"high"},{"seq":176218,"id":"CVE-2026-28626","ts":1789342752097,"field":"cvss","old":"7.3","new":null},{"seq":176217,"id":"CVE-2026-28626","ts":1789342752097,"field":"severity","old":"high","new":"none"},{"seq":176002,"id":"CVE-2026-28626","ts":1789342358601,"field":"cvss","old":null,"new":"7.3"},{"seq":176001,"id":"CVE-2026-28626","ts":1789342358601,"field":"severity","old":"none","new":"high"},{"seq":175542,"id":"CVE-2026-28626","ts":1789338390100,"field":"cvss","old":"7.3","new":null},{"seq":175541,"id":"CVE-2026-28626","ts":1789338390100,"field":"severity","old":"high","new":"none"},{"seq":174337,"id":"CVE-2026-28626","ts":1789334604845,"field":"cvss","old":null,"new":"7.3"},{"seq":174336,"id":"CVE-2026-28626","ts":1789334604845,"field":"severity","old":"none","new":"high"},{"seq":173132,"id":"CVE-2026-28626","ts":1789333197520,"field":"cvss","old":"7.3","new":null},{"seq":173131,"id":"CVE-2026-28626","ts":1789333197520,"field":"severity","old":"high","new":"none"},{"seq":171946,"id":"CVE-2026-28626","ts":1789330884563,"field":"cvss","old":null,"new":"7.3"},{"seq":171945,"id":"CVE-2026-28626","ts":1789330884563,"field":"severity","old":"none","new":"high"}]}