CVE-2026-0016 | Google Android 16/16-qpr2 CredentialManagerService.java updateProvidersWhenServiceRemoved permission (WID-SEC-2026-1772)

A vulnerability labeled as critical has been found in Google Android 16/16-qpr2. This vulnerability affects the function updateProvidersWhenServiceRemoved of the file CredentialManagerService.java. Such manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2026-0016. Local access is required to approach this attack. No exploit exists.