{"id":"ASB-A-445418705", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-26T15:22:10.377767615Z", "aliases":["CVE-2026-0078", "A-445418705"], "details":"In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/64a559cbc04fc61777989cff0b189f423323cfb5"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"142823809086880022234764459838481887623", "length":1145}, "id":"ASB-A-445418705-021233da", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/64a559cbc04fc61777989cff0b189f423323cfb5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setGlobalProxy"}}, {"deprecated":false, "digest":{"line_hashes":["327457677134402974318899540853853534982", "9587636024942198925881020435161507952", "82063547044743837200153402558375784615"], "threshold":0.9}, "id":"ASB-A-445418705-15cc4d9a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/64a559cbc04fc61777989cff0b189f423323cfb5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a7cb04f968839559ba75072e17fb2f1128f5afe4"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"175431350370518345770120282350445003279", "length":1100}, "id":"ASB-A-445418705-2a2b0d60", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a7cb04f968839559ba75072e17fb2f1128f5afe4", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setGlobalProxy"}}, {"deprecated":false, "digest":{"line_hashes":["327457677134402974318899540853853534982", "9587636024942198925881020435161507952", "82063547044743837200153402558375784615"], "threshold":0.9}, "id":"ASB-A-445418705-2db5f828", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a7cb04f968839559ba75072e17fb2f1128f5afe4", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0dc0cf0be184244582e501f1d0923c78f1ae6b3c"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"175431350370518345770120282350445003279", "length":1100}, "id":"ASB-A-445418705-b4378607", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0dc0cf0be184244582e501f1d0923c78f1ae6b3c", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setGlobalProxy"}}, {"deprecated":false, "digest":{"line_hashes":["327457677134402974318899540853853534982", "9587636024942198925881020435161507952", "82063547044743837200153402558375784615"], "threshold":0.9}, "id":"ASB-A-445418705-c82c8cc3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0dc0cf0be184244582e501f1d0923c78f1ae6b3c", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/aefee56aefddab829ec3733daba9eccfd0f42b5c"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"175431350370518345770120282350445003279", "length":1100}, "id":"ASB-A-445418705-106e6fb7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aefee56aefddab829ec3733daba9eccfd0f42b5c", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setGlobalProxy"}}, {"deprecated":false, "digest":{"line_hashes":["327457677134402974318899540853853534982", "9587636024942198925881020435161507952", "82063547044743837200153402558375784615"], "threshold":0.9}, "id":"ASB-A-445418705-93134c30", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aefee56aefddab829ec3733daba9eccfd0f42b5c", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8b7d81b50b8ce461168f39d275f75730e1111ba7"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"175431350370518345770120282350445003279", "length":1100}, "id":"ASB-A-445418705-247e7784", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8b7d81b50b8ce461168f39d275f75730e1111ba7", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setGlobalProxy"}}, {"deprecated":false, "digest":{"line_hashes":["65383044451450088293606005854642619383", "159936200850751029600833555055021269930", "19745850214737326736913418988541692735", "21344383000083744290769515150609826893", "327457677134402974318899540853853534982", "9587636024942198925881020435161507952", "82063547044743837200153402558375784615"], "threshold":0.9}, "id":"ASB-A-445418705-cc46dc2d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8b7d81b50b8ce461168f39d275f75730e1111ba7", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/50cbf4422ac8e930c522642f5dce0724581a6aa9"}]}