{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-58873", "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", "state": "PUBLISHED", "assignerShortName": "google_android", "dateReserved": "2026-07-02T06:02:21.466Z", "datePublished": "2026-11-02T20:31:02.552Z", "dateUpdated": "2026-11-02T20:31:02.552Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", "shortName": "google_android", "dateUpdated": "2026-11-02T20:31:02.552Z"}, "datePublic": "2026-11-02T20:29:00.000Z", "affected": [{"vendor": "Google", "product": "Android XR", "platforms": ["Android"], "packageName": "XR", "versions": [{"status": "affected", "version": "14"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."}]}], "references": [{"url": "https://source.android.com/docs/security/bulletin/xr/2026/2026-11-01", "tags": ["vendor-advisory"]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{}

{}

{}

{}