一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-0094 [HIGH] – In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user

未分类
📑 文章目录

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.