Android AppOpsService Permission Bypass Vulnerability Allowing Information Disclosure

Vulnerability

A vulnerability has been identified in the AppOpsService component of Android, where multiple functions may lack proper permission checks. This permissions bypass could lead to unauthorized local information disclosure, without requiring additional execution privileges or user interaction for exploitation. The issue affects several different versions and ranges of Android.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.

Added: Jun 1, 2026, 10:20 PM
Updated: Jun 1, 2026, 10:20 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
3.3
remediation
0.0
relevance
9.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.