CVE-2026-0009
published 2026-06-01CVE-2026-0009: In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional…
PriorityP343high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.07%
0.1th percentile
In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 15/16 Local Privilege Escalation (WID-SEC-2026-1772)
vuldb·2026-06-03·CVSS 6.2
CVE-2026-0009 [MEDIUM] Google Android 15/16 Local Privilege Escalation (WID-SEC-2026-1772)
A vulnerability was found in Google Android 15/16. It has been declared as critical. This affects an unknown part. The manipulation results in Local Privilege Escalation.
This vulnerability is reported as CVE-2026-0009. The attack requires a local approach. No exploit exists.
GHSA
In multiple locations, there is a possible tapjacking due to a logic error in the code.
ghsa_unreviewed·2026-06-02
CVE-2026-0009 [MEDIUM] CWE-269 In multiple locations, there is a possible tapjacking due to a logic error in the code.
In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Palo Alto
PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION
vendor_paloalto·2026-06-10·CVSS 8.1
CVE-2026-35385 [HIGH] PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION
PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to Prisma SD-WAN ION. While Prisma SD-WAN ION may include the
CVEs: CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414
Affected products: Prisma SD
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-01
Published