{"id":"CVE-2026-0086","aliases":["A-476417007","ASB-A-476417007","EUVD-2026-33798","GHSA-vgqp-c67c-r79g"],"status":"published","title":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data...","description":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00075,"percentile":0.00075,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2026-06-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":"platform/packages/apps/Settings","fixed_in":["17-next:2026-06-01","16-qpr2:2026-06-01"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":"platform/packages/apps/Settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"]},{"source":"osv","ecosystem":"Android","package":"platform/packages/apps/Settings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-06-01","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0086"},{"url":"https://github.com/advisories/GHSA-vgqp-c67c-r79g"},{"url":"https://source.android.com/security/bulletin/2026-06-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-0086","description":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2026-06-01T21:14:54.519Z","modified":"2026-06-03T03:55:37.186Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:20:13.587351Z"}],"euvd":[{"id":"EUVD-2026-33798","description":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2026-06-01T21:14:54Z","modified":"2026-06-03T03:55:37Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:55.231104Z"}],"ghsa":[{"id":"GHSA-vgqp-c67c-r79g","title":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data...","description":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2026-06-02T00:31:56Z","modified":"2026-06-02T18:32:36Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:08:30.158602Z"}],"nvd":[{"id":"CVE-2026-0086","description":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2026-06-01T22:16:22.34Z","modified":"2026-11-06T16:27:44.26Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-06T18:00:52.116018Z"}],"osv":[{"id":"ASB-A-476417007","description":"In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2026-06-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:07.135383Z"}]}}