CVE-2026-28576 – Contacts Provider SQL Injection

CVE ID :CVE-2026-28576

Published : June 17, 2026, 7:19 a.m. | 2 hours, 22 minutes ago

Description :In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity: 10.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…