3 matches found
CVE-2026-58873: Google Android XR: In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission…
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Android XR Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.
The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...
Android XR Bulletin—April 2026Stay organized with collectionsSave and categorize content based on your preferences.
The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-04-05 or later from the April 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...