CVE-2026-28577

Name of the Vulnerable Software and Affected Versions WindowManagerService (affected versions not specified)

Description A tapjacking issue exists in the addWindow() function of WindowManagerService.java, where a tapjacking or overlay attack—a technique where a malicious application overlays a transparent or deceptive window over a legitimate one to trick the user or system—could occur. This may lead to a local escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.