CVE-2026-0065: Elevation of privilege in Google Android

This vulnerability exists due to a logic error in the areBackgroundActivityStartsAllowed method within BackgroundLaunchProcessController.java in Android. The flaw permits activities to be launched in the background unintentionally, enabling a local attacker with limited privileges to escalate their privileges without needing user interaction. The CVSS 3.1 score is 7.8, indicating high severity with impact on confidentiality, integrity, and availability. The affected versions explicitly include Android versions 14, 15, 16, and 16-qpr2. No patch or remediation information is provided in the input data.

Successful exploitation allows a local attacker with user execution privileges to escalate their privileges on the device, potentially gaining higher access rights. The vulnerability impacts confidentiality, integrity, and availability of the affected Android systems. No user interaction is required, increasing the risk of exploitation in local scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Google Android security advisories for updates. Until a fix is available, limiting local access to trusted users may reduce risk.