CVE-2026-28613

unknowncovered by 2 sourcesfirst seen 2026-09-08

In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

⚡ Watch CVE-2026-28613

Get an email if CVE-2026-28613 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

unknownAndroid Multiple Vulnerabilitieshkcert · 2026-09-09
unknownCVE-2026-28613: In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary inten…nvd · 2026-09-08

External references

NVD record for CVE-2026-28613

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-28613 status](https://www.csirts.com/badge/CVE-2026-28613)](https://www.csirts.com/cve/CVE-2026-28613)