---
id: "CVE-2026-0053"
kind: "vulnerability"
aliases: ["CVE-2026-0053"]
title: "Android: a primary user can disable NFC for other users"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["android", "mobile", "multi-user", "runtime"]
not_affected_if: ["no-secondary-users", "single-user-device"]
published_at: "2026-11-02T20:17:23+00:00"
first_seen_at: "2026-11-02T20:35:25+00:00"
updated_at: "2026-11-02T20:40:56+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0053", "first_seen_at": "2026-11-02T20:35:25+00:00"}]
---

# Android: a primary user can disable NFC for other users

A primary Android user can disable secure NFC for other full users because user isolation is insufficient. This gives local privilege escalation with no extra execution privileges and no user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Android security patch level under Settings > About phone > Android version, or run `adb shell getprop ro.build.version.security_patch` on a connected device
- Check whether the device has multiple full user profiles with `adb shell pm list users`

## Timeline

- 2026-11-02T20:35:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-0053

## From the sources

In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_