CVE-2026-0192

MediumCVSS 6.7

Published: 15/09/2026(UTC)Updated: 21/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.07%

0th percentile - higher than 0% of all known CVEs

Summary

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

A user with System privileges could escalate to full privileges, potentially leading to complete device takeover.

Recommendation

Apply vendor security patches that add the missing permission check in the Bootloader.

Other vulnerabilities in Android Bootloader

CVE-2026-0179Medium
In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS