CVE-2026-0047Not scored
Google Android vulnerability
Google · Android
Not in CISA KEVVendor fix available
0.1%probability of exploitation in the next 30 days
2nd percentile
050100
Higher than 2% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage1 article · 1 outlet
First in our coverage: Dark Reading, 3 Mar.
- Qualcomm graphics CVE-2026-21385 memory flaw targeted AndroidDark Reading · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.