CVE-2026-28615 is a critical vulnerability in the Telecomm component of Google Android version 17. The issue arises from a permissions bypass that permits unauthorized phone call initiation. Exploitation does not require user interaction or elevated execution privileges, leading to local escalation of privilege. The CVSS 4.0 base score is 10.0, reflecting its critical severity and ease of exploitation. No official patch or remediation level has been published by the vendor as of the provided data.

Successful exploitation allows an attacker to escalate privileges locally by bypassing permission checks in the Telecomm component, enabling unauthorized phone calls. This could compromise device integrity and user privacy. No additional execution privileges or user interaction are needed, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor for vendor updates and apply patches promptly once available.