{"id":"CVE-2026-58944","published":"2026-11-02T20:17:51.393","lastModified":"2026-11-03T05:18:49.187","description":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-441"],"vendors":[],"products":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A confused deputy flaw in ActivityTaskManagerService.java allows a background app to launch another app without user interaction, leading to local privilege escalation by bypassing intended access controls.","exploitability":"Exploitation requires local access and no additional privileges or user interaction, but is limited to the attacker already having compromised or controlled a background application.","blast_radius":"Successful exploitation could allow an attacker to execute arbitrary code in the context of another app or system component, potentially compromising confidentiality, integrity, and availability of the device.","remediation":"Apply the patch released in Android Security Bulletin 2026-07 (or later), which addresses CVE-2026-58944 by correcting the permission check in moveTaskToFrontLocked.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["confused-deputy","privilege-escalation","android","local-exploit","no-ui"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:06:11.098Z"}}