CVE-2026-0072 in Android XRinformación

Resumen

por MITRE • 2026-06-01

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Google Android

Reservar

2025-10-15

Divulgación

2026-06-01

Moderación

aceptado

Artículo

VDB-367712

CPE

listo

EPSS

0.00025

KEV

no

Actividades

muy bajo

Sector

Insurance, Police, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-0072
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-0072
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-0072/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!