{"id":"CVE-2025-48526","title":"In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation","summary":"In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no ad…","severity":"medium","cvss":4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssSource":"adp","vendor":"Google","product":"Android","affected":["Android 16","Android 15","Android 14","Android 13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-09-06T03:56:12.048428Z"},"published":"2025-09-04","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:03:04.765Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-48526","references":[{"url":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/923a5673ac9d4b366097a8912a04e40e85111ed4"},{"url":"https://source.android.com/security/bulletin/2025-09-01"}],"tags":["cve.org"],"epss":0.0009,"epssPercentile":0.0042,"ingestedAt":"2026-11-05T20:33:06.563Z","slug":"CVE-2025-48526","body":"## Overview\n\nIn createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `Android 16`\n- `Android 15`\n- `Android 14`\n- `Android 13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":22,"depthScoreParts":{"impact":22,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}