Aller au contenu
en Se connecter
10.0 Critique

CVE-2026-28659 In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check

Description

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Produits et versions touchés

Produit Versions touchées Corrigé en
Android XR 14 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Android XR

Les 3 CVE de Android XR →
CVE-2026-58873 In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission… 8.4 Élevée CVE-2026-0072 In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission… 10.0 Critique
Suivre cette CVE