CVE-2026-0061 in Android
Zusammenfassung
von MITRE • 02.06.2026
In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Once again VulDB remains the best source for vulnerability data.