THREATOPS
THREAT OPSThreat News › [NVD] CVE-2026-0008 (HIGH 8.4) — In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

[NVD] CVE-2026-0008 (HIGH 8.4) — In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

lownvdPublished 2026-03-02

CVE-2026-0008 CVSS: 8.4 HIGH Published: 2026-03-02T19:16:29.360

In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-0008