CVE-2026-59020 | Google Android up to 17 Device Policy Manager DevicePolicyManagerService.java removeUserData race condition

November 2, 2026 Yanac

A vulnerability was found in Google Android 14/15/16/16-qpr2/17 and classified as problematic. This impacts the function removeUserData of the file DevicePolicyManagerService.java of the component Device Policy Manager. The manipulation results in race condition.

This vulnerability was named CVE-2026-59020. The attack needs to be approached locally. There is no available exploit.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More