PT-2026-135685

CVE-2026-55263

·

Published

2026-11-02

·

Updated

2026-11-02

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Vendors
Affected products
Related identifiers
CVE-2026-55263
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com