CVE-2026-28587 – In MmsSmsProvider of MmsSmsProvider.java, there is

CVE ID :CVE-2026-28587

Published : June 17, 2026, 7:21 a.m. | 2 hours, 20 minutes ago

Description :In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity: 10.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…