THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-0011 (HIGH 8.4) — In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi

[NVD] CVE-2026-0011 (HIGH 8.4) — In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi

lownvdPublished 2026-03-02

CVE-2026-0011 CVSS: 8.4 HIGH Published: 2026-03-02T19:16:29.590

In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Indicators of compromise

CVE-2026-0011cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-0011