CVE-2026-0092Exploit(google / android)

LOWCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for google android systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

google CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://source.android.com/docs/security/bulletin/android-17

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

android

Threat summary

Public PoC and exploit tooling are both present
5 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 2 signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-08-07); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

google

Products

android

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

Exploit

250.0%

General

125.0%

PoC

125.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-07	2	General1PoC1
2026-08-31	2	Exploit2

Full discourse5 posts

ExploitGrid@exploitgrid46d
General
🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: EGE-GH-6VzYuGW ( CVE-2025-32432 ) EGE-GH-xiVZBJy ( CVE-2026-0092 ) EGE-GH-eHNcyov ( CVE-2024-21413 ) EGE-GH-9UtrTVp ( CVE-2024-21413 ) EGE-GH-Ix6VGxH ( CVE-2023-6553 ) ..🧵👇
Post summary
The post merely lists several CVE identifiers as critical exploits without offering additional details on PoCs, active use, patches, or technical specifics.
20021167
42 followersView on X
James Wang@jameswang45186d
@enp39s0 这是个 CVE 吧，CVE-2026-0092.应该是能绕过运营商限制？
1000084
4 followersView on X
ExploitGrid@exploitgrid22d
Exploit
[CVE] CVE-2026-0092 [CRITICAL/PoC] ⚠️ Recorded Exploit Available 🔗 https://exploitgrid.net/cve/CVE-2026-0092
Post summary
The brief tweet announces that CVE‑2026‑0092 is critical and that a recorded exploit (PoC) is available, linking to exploitgrid for details, but it does not mention a patch, active exploitation, or technical specifics.
1000055
38 followersView on X
ExploitGrid@exploitgrid22d
Exploit
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2025-71338 - EXPLOIT CVE-2025-71389 - EXPLOIT CVE-2026-0092 - EXPLOIT CVE-2026-0848 - EXPLOIT CVE-2026-12485 - EXPLOIT ..🧵👇
Post summary
The digest lists five CVEs flagged as having exploits, but offers no additional technical details, PoC, or active‑exploitation evidence.
1000063
38 followersView on X
ExploitGrid@exploitgrid46d
PoC
[EXPLOIT] EGE-GH-xiVZBJy [CRITICAL/PoC] Linked: CVE-2026-0092 CVE-2026-0092 🔗 https://exploitgrid.net/exploits/a71e640b-501c-4502-b147-184bdfd20a15
Post summary
A proof‑of‑concept for CVE-2026-0092 has been released and linked to an exploit grid entry, indicating that code is available but there is no evidence of active exploitation or a patch.
1000053
29 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	google	android	17.0	-	-

Explore more

Back to dashboard google CVEs android vulnerabilities

What researchers are saying

CVE-2026-0092

ExploitGrid@exploitgridGeneral

The post merely lists several CVE identifiers as critical exploits without offering additional details on PoCs, active use, patches, or technical specifics.

ExploitGrid@exploitgridExploit

The brief tweet announces that CVE‑2026‑0092 is critical and that a recorded exploit (PoC) is available, linking to exploitgrid for details, but it does not mention a patch, active exploitation, or technical specifics.

ExploitGrid@exploitgridExploit

The digest lists five CVEs flagged as having exploits, but offers no additional technical details, PoC, or active‑exploitation evidence.

ExploitGrid@exploitgridPoC

A proof‑of‑concept for CVE-2026-0092 has been released and linked to an exploit grid entry, indicating that code is available but there is no evidence of active exploitation or a patch.