CVE-2026-28625: Elevation of privilege in Google Android

This vulnerability involves a logic error in multiple locations within Google Android's code that may allow a local attacker to bypass permission checks, resulting in elevation of privilege. The flaw does not require the attacker to have additional execution privileges or user interaction to exploit. The affected versions explicitly include Android 14 through 17 and 16-qpr2. No CVSS score is provided, and no known exploits in the wild have been reported. There is no information on patch availability or vendor advisories in the provided data.

Successful exploitation could allow a local attacker to escalate privileges on the affected Android device without needing additional execution privileges or user interaction. This could lead to unauthorized access to restricted functions or data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates.