Vulnerabilidades de Google Android XR (CVE)

Registros CVE publicados para Google Android XR, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
8.4Alta
CVE-2026-58873
Google Android XR

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e…

10.0Crítica
CVE-2026-28659
Google Android XR

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

10.0Crítica
CVE-2026-0072
Google Android XR

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp…