Android Device Policy Manager Service Elevation of Privilege Vulnerability

A vulnerability has been identified in the DevicePolicyManagerService component of Android. This issue arises from improper input validation in the setGlobalProxy function, leading to a potential desynchronization in data persistence. As a result, this vulnerability could allow local escalation of privilege without requiring any additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.