What is GHSA-ph86-9mcx-3p6r?

GHSA-ph86-9mcx-3p6r is a security advisory published by GitHub Security Advisories with Critical severity. In Contacts Provider, there is a possible way to access the contacts database due to SQL...

Which CVE IDs does GHSA-ph86-9mcx-3p6r cover?

GHSA-ph86-9mcx-3p6r covers the following CVE IDs: CVE-2026-28576. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ph86-9mcx-3p6r?

GHSA-ph86-9mcx-3p6r has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-ph86-9mcx-3p6rCriticalCVSS 5.5

In Contacts Provider, there is a possible way to access the contacts database due to SQL...

Vendor

GitHub Security Advisories

Published

June 17, 2026

Last Modified

June 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-28576 →

📋 Description

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-28576
https://source.android.com/docs/security/bulletin/android-17
https://github.com/advisories/GHSA-ph86-9mcx-3p6r