THREAT OPS › Threat News › [NVD] CVE-2026-28581 (MEDIUM 4.0) — In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation with User execution privileges needed. User interaction is needed for exploitation.
[NVD] CVE-2026-28581 (MEDIUM 4.0) — In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation with User execution privileges needed. User interaction is needed for exploitation.
CVE-2026-28581 CVSS: 4.0 MEDIUM Published: 2026-06-01T22:16:25.110
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation with User execution privileges needed. User interaction is needed for exploitation.
Indicators of compromise
- CVE-2026-28581cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-28581