CVE-2026-0013

Name of the Vulnerable Software and Affected Versions PickActivity (affected versions not specified)

Description A flaw exists in the setupLayout function within the PickActivity.java file that may allow an attacker to initiate any activity as a DocumentsUI application. This condition, known as a confused deputy, could result in local privilege escalation without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.