CVE-2026-28630: Security vulnerability

Published Sep 8, 2026

Updated

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Event History

Sep 8, 2026

CVE Published

via MITRE·06:05 PM

Data Sourced

via MITRE·06:05 PM

DescriptionWeakness

Frequently Asked Questions

What capabilities does an attacker need to exploit this issue?

The issue is described as a tapjacking or overlay attack and requires no additional execution privileges. Exploitation does not require user interaction.

What is the potential impact?

Successful exploitation could cause local information disclosure through misleading UI in ContactsPickerActivity.kt.

CVE-2026-28630: Security vulnerability

Event History

Frequently Asked Questions

What capabilities does an attacker need to exploit this issue?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

What capabilities does an attacker need to exploit this issue?

What is the potential impact?