Android Companion Device Manager Service Confused Deputy Vulnerability Allowing Local Privilege Escalation
Vulnerability
A logic error in the Companion Device Manager Service could create a confused deputy scenario, allowing for local privilege escalation without requiring additional execution privileges or user interaction.
Impact
Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, potentially allowing a user to perform actions or access resources that are normally restricted.
Added: Mar 2, 2026, 7:36 PM
Updated: Mar 2, 2026, 8:58 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
3.3remediation
0.0relevance
3.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.