CVE-2018-9526: Google Android

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033

Affected products

• Google Android: version 9.0 only

Published 2018-11-14. Last modified 2026-06-17.