Vulnerability record/PUBLISHED/Published Nov 2, 2026 19:54:06 UTC
CVE-2026-58886
In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritygoogle_android
Last updatedNov 2, 2026 19:54:06 UTC
PublishedNov 2, 2026 19:54:06 UTC
ReservedJul 2, 2026 06:08:07 UTC