Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-58873 1 Google 1 Android Xr 2026-11-10 8.4 High
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.