CVE-2026-28663
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 08, 2026
Vendor
unknown
Description
In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.