Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
🚨 HIGH: CVE-2026-0091 (CVSS 7.8) Android launcher code execution via over-privileged shell user. Local privilege escalation, no user interaction needed. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/HfG2x5pO7B
Post summary
The message announces CVE‑2026‑0091, outlining a local privilege escalation flaw in Android launchers, and urges immediate patching.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | 14.0 | - | - | |
| OS | android | 15.0 | - | - | |
| OS | android | 16.0 | - | - | |
| OS | android | 16.0 | - | - | |
| OS | android | 16.0 | - | - | |
| OS | android | 16.0 | - | - |