CVE-2026-28631

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description In the buildMiniResolver() function of IntentForwarderActivity.java, a consent bypass is possible through a tapjacking or overlay attack. Tapjacking occurs when a malicious application overlays a transparent window over a legitimate application to trick the user or system into performing an action. This issue could lead to local escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.