{"id":"CVE-2026-45528","title":"In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent","summary":"In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-926"],"vendor":"Google","product":"Android","affected":["Android 17","Android 16-qpr2","Android 16","Android 15","Android 14"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T15:17:34.660","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45528","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:57:31.562684Z"},"epss":0.00071,"epssPercentile":0.00058,"ingestedAt":"2026-09-08T19:08:49.641Z","slug":"CVE-2026-45528","body":"## Overview\n\nIn getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201678,"id":"CVE-2026-45528","ts":1789399605499,"field":"cvss","old":null,"new":"7.3"},{"seq":201677,"id":"CVE-2026-45528","ts":1789399605499,"field":"severity","old":"none","new":"high"},{"seq":200410,"id":"CVE-2026-45528","ts":1789397209849,"field":"cvss","old":"7.3","new":null},{"seq":200409,"id":"CVE-2026-45528","ts":1789397209849,"field":"severity","old":"high","new":"none"},{"seq":198334,"id":"CVE-2026-45528","ts":1789391841868,"field":"cvss","old":null,"new":"7.3"},{"seq":198333,"id":"CVE-2026-45528","ts":1789391841868,"field":"severity","old":"none","new":"high"},{"seq":196127,"id":"CVE-2026-45528","ts":1789383483058,"field":"cvss","old":"7.3","new":null},{"seq":196126,"id":"CVE-2026-45528","ts":1789383483058,"field":"severity","old":"high","new":"none"},{"seq":195056,"id":"CVE-2026-45528","ts":1789380374713,"field":"cvss","old":null,"new":"7.3"},{"seq":195055,"id":"CVE-2026-45528","ts":1789380374713,"field":"severity","old":"none","new":"high"},{"seq":193843,"id":"CVE-2026-45528","ts":1789378331048,"field":"cvss","old":"7.3","new":null},{"seq":193842,"id":"CVE-2026-45528","ts":1789378331048,"field":"severity","old":"high","new":"none"},{"seq":192630,"id":"CVE-2026-45528","ts":1789376324835,"field":"cvss","old":null,"new":"7.3"},{"seq":192629,"id":"CVE-2026-45528","ts":1789376324835,"field":"severity","old":"none","new":"high"},{"seq":191417,"id":"CVE-2026-45528","ts":1789373240559,"field":"cvss","old":"7.3","new":null},{"seq":191416,"id":"CVE-2026-45528","ts":1789373240559,"field":"severity","old":"high","new":"none"},{"seq":190202,"id":"CVE-2026-45528","ts":1789369202968,"field":"cvss","old":null,"new":"7.3"},{"seq":190201,"id":"CVE-2026-45528","ts":1789369202968,"field":"severity","old":"none","new":"high"},{"seq":188989,"id":"CVE-2026-45528","ts":1789368105815,"field":"cvss","old":"7.3","new":null},{"seq":188988,"id":"CVE-2026-45528","ts":1789368105815,"field":"severity","old":"high","new":"none"},{"seq":187772,"id":"CVE-2026-45528","ts":1789365062728,"field":"cvss","old":null,"new":"7.3"},{"seq":187771,"id":"CVE-2026-45528","ts":1789365062728,"field":"severity","old":"none","new":"high"},{"seq":186559,"id":"CVE-2026-45528","ts":1789363092659,"field":"cvss","old":"7.3","new":null},{"seq":186558,"id":"CVE-2026-45528","ts":1789363092659,"field":"severity","old":"high","new":"none"},{"seq":185345,"id":"CVE-2026-45528","ts":1789361024436,"field":"cvss","old":null,"new":"7.3"},{"seq":185344,"id":"CVE-2026-45528","ts":1789361024436,"field":"severity","old":"none","new":"high"},{"seq":184132,"id":"CVE-2026-45528","ts":1789358007739,"field":"cvss","old":"7.3","new":null},{"seq":184131,"id":"CVE-2026-45528","ts":1789358007739,"field":"severity","old":"high","new":"none"},{"seq":182383,"id":"CVE-2026-45528","ts":1789354155720,"field":"cvss","old":null,"new":"7.3"},{"seq":182382,"id":"CVE-2026-45528","ts":1789354155720,"field":"severity","old":"none","new":"high"},{"seq":181176,"id":"CVE-2026-45528","ts":1789352997989,"field":"cvss","old":"7.3","new":null},{"seq":181175,"id":"CVE-2026-45528","ts":1789352997989,"field":"severity","old":"high","new":"none"},{"seq":179969,"id":"CVE-2026-45528","ts":1789350073881,"field":"cvss","old":null,"new":"7.3"},{"seq":179968,"id":"CVE-2026-45528","ts":1789350073881,"field":"severity","old":"none","new":"high"},{"seq":178762,"id":"CVE-2026-45528","ts":1789347933050,"field":"cvss","old":"7.3","new":null},{"seq":178761,"id":"CVE-2026-45528","ts":1789347933050,"field":"severity","old":"high","new":"none"},{"seq":177555,"id":"CVE-2026-45528","ts":1789346218795,"field":"cvss","old":null,"new":"7.3"},{"seq":177554,"id":"CVE-2026-45528","ts":1789346218795,"field":"severity","old":"none","new":"high"},{"seq":176348,"id":"CVE-2026-45528","ts":1789342841545,"field":"cvss","old":"7.3","new":null},{"seq":176347,"id":"CVE-2026-45528","ts":1789342841545,"field":"severity","old":"high","new":"none"},{"seq":175802,"id":"CVE-2026-45528","ts":1789338624687,"field":"cvss","old":null,"new":"7.3"},{"seq":175801,"id":"CVE-2026-45528","ts":1789338624687,"field":"severity","old":"none","new":"high"},{"seq":175672,"id":"CVE-2026-45528","ts":1789338463841,"field":"cvss","old":"7.3","new":null},{"seq":175671,"id":"CVE-2026-45528","ts":1789338463841,"field":"severity","old":"high","new":"none"},{"seq":174467,"id":"CVE-2026-45528","ts":1789334653856,"field":"cvss","old":null,"new":"7.3"},{"seq":174466,"id":"CVE-2026-45528","ts":1789334653856,"field":"severity","old":"none","new":"high"},{"seq":173262,"id":"CVE-2026-45528","ts":1789333341325,"field":"cvss","old":"7.3","new":null},{"seq":173261,"id":"CVE-2026-45528","ts":1789333341325,"field":"severity","old":"high","new":"none"},{"seq":172076,"id":"CVE-2026-45528","ts":1789330940539,"field":"cvss","old":null,"new":"7.3"},{"seq":172075,"id":"CVE-2026-45528","ts":1789330940539,"field":"severity","old":"none","new":"high"}]}