PT-2026-45572 · Google · Android Framework
CVE-2026-0048
·
Published
2026-06-01
·
Updated
2026-07-22
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android Framework (affected versions not specified)
Description
A flaw in
WindowState.java allows a tapjacking or overlay attack, where a user can be tricked into approving permissions. This issue results from improper access control and can lead to a local escalation of privilege without requiring additional execution privileges.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Android Framework