A-277076451: Android/platform/frameworks/native vulnerability

Q: What does an attacker need to exploit this issue?

The issue can be exploited through a tapjacking or overlay attack and does not require additional execution privileges. No user interaction is needed for exploitation.

Q: What is the potential impact of successful exploitation?

An attacker may be able to trick a user into disclosing Autofill contents, which could result in local escalation of privilege.

Published Nov 1, 2026

Updated

In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

3 affected componentsFixes available

android/platform/frameworks/native>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/native>=15:0<15:2026-11-01

15:2026-11-01

android/platform/frameworks/native>=14:0<14:2026-11-01

14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The issue can be exploited through a tapjacking or overlay attack and does not require additional execution privileges. No user interaction is needed for exploitation.

What is the potential impact of successful exploitation?

An attacker may be able to trick a user into disclosing Autofill contents, which could result in local escalation of privilege.

A-277076451: Android/platform/frameworks/native vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?