CVE-2026-58873: High severity vulnerability

Published Nov 2, 2026

Updated

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Event History

Nov 2, 2026

CVE Published

via NVD·09:17 PM

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is local and requires no privileges or user interaction. Exploitation could allow local escalation of privilege.

What is the potential impact if exploitation succeeds?

The vulnerability is rated high with a CVSS score of 8.4 and affects confidentiality, integrity, and availability at high impact levels. It could enable an attacker to bypass a permission check in WindowManagerService.

CVE-2026-58873: High severity vulnerability

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?