Live › vulnerability › CVE-2026-0053
A primary Android user can disable secure NFC for other full users because user isolation is insufficient. This gives local privilege escalation with no extra execution privileges and no user interaction.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
Android devices with more than one full user profile are exposed, since the flaw lets the primary user affect other full users. Single-user devices and devices without multiple profiles are unlikely to be affected. The sources do not name affected Android versions.
No product ranges from the sources yet.
adb shell getprop ro.build.version.security_patch on a connected deviceadb shell pm list usersNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-0053")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.