Aller au contenu
en Se connecter
8.4 Élevée

CVE-2026-58873 In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission…

Description

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Produits et versions touchés

Produit Versions touchées Corrigé en
Android XR 14 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Android XR

Les 3 CVE de Android XR →
CVE-2026-28659 In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check 10.0 Critique CVE-2026-0072 In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission… 10.0 Critique
Suivre cette CVE