CVE-2026-0015

MEDIUM Exploited in Wild

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3.1 Score

6.2
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Published: 3/2/2026Modified: 3/6/2026

Related Intelligence (1)

CRITICALZero DayExploited

Critical Zero-Day in Palo Alto PAN-OS Firewalls Under Active Mass Exploitation

A critical unauthenticated RCE in PAN-OS GlobalProtect is being mass exploited. Over 25,000 devices vulnerable. CISA issues emergency directive.

CVE-2026-0015PAN-OS 11.1
Palo Alto Networks PSIRT

References (1)

https://source.android.com/docs/security/bulletin/2026/2026-03-01