Security Advisory

CVE-2026-28576

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-17 07:19:47

Last updated 2026-06-17 10:41:28

Assigner google_android

CVSS score 10.0

State PUBLISHED

Description

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

← Browse all CVEs View on cve.org ↗