{"id":"CVE-2026-58866","published":"2026-11-02T20:17:49.013","lastModified":"2026-11-03T05:18:47.603","description":"In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A missing permission check in AccessibilityWindowManager.java allows an attacker to set accessibility window attributes without authorization, potentially misleading the user interface and enabling local privilege escalation.","exploitability":"Exploitation requires local access and no user interaction; the missing permission check makes it straightforward for a local attacker.","blast_radius":"Successful exploitation could allow an attacker to manipulate system UI elements (e.g., overlay windows, focus) to steal credentials or execute unauthorized actions with elevated privileges.","remediation":"Add a permission check in setAccessibilityWindowAttributes() to enforce the required system-level permission before allowing modification of accessibility window attributes; if a fixed version is available, upgrade to the patched release.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","ui-spoofing","missing-authz","local-exploit"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:05:20.463Z"}}