Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
There is a new vulnerability with elevated criticality in Google Android (CVE-2026-57042) https://vuldb.com/vuln/404546
Post summary
The text is a brief announcement of CVE-2026-57042 affecting Google Android with a link to a vulnerability database page, but provides no technical details, PoC, exploit, remediation, or exploitation status.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - |