A critical local privilege escalation vulnerability in Google Android allows an attacker to gain elevated privileges without user interaction.

The flaw exists within the loadDescription method of DeviceAdminInfo.java, where improper input validation leads to a persistent package issue that enables an attacker to achieve local escalation of privilege.

Successful exploitation of this vulnerability allows a local attacker to gain elevated system privileges, potentially bypassing security controls and accessing sensitive data. With a CVSS score of 7.8, this vulnerability represents a significant risk to device integrity and confidentiality, as it requires no user interaction to execute.

Immediate Action: Organizations and users must apply the March 2026 Android security updates provided by Google or their respective device manufacturers as soon as they become available.

Proactive Monitoring: Security teams should monitor system logs for unusual package installation behavior or unexpected changes in service permissions that could indicate exploitation attempts.

Compensating Controls: Ensure that device security policies are strictly enforced and that users are restricted from installing applications from untrusted sources, which remains a primary vector for delivering malicious packages.

Public Exploit Available: Unknown

The potential for local privilege escalation poses a serious threat to the security posture of affected Android devices. Administrators should prioritize the deployment of the March 2026 security patches to all managed devices to neutralize the risk of unauthorized privilege escalation.