Detections
Analytics
CVE-2026-28613
high
Description
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
References
https://source.android.com/docs/security/bulletin/2026/2026-09-01