https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T05:51:48.617828+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-28663 CVE-2026-28663 2026-10-02T05:51:48.620535+00:00

Affected: Google Android

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.