CVE-2026-0046 in Androidinfo

Zusammenfassung

von MITRE • 02.06.2026

In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Zuständig

Google Android

Reservieren

15.10.2025

Veröffentlichung

02.06.2026

Moderieren

akzeptiert

Eintrag

VDB-367835

CPE

bereit

EPSS

0.00005

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!