{"id":"CVE-2026-58970","published":"2026-11-02T20:17:53.263","lastModified":"2026-11-03T05:18:50.127","description":"In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-441"],"vendors":[],"products":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A confused deputy vulnerability in AppTimeTracker.java allows a local attacker to trigger an unintended background activity launch, leading to potential privilege escalation without user interaction or additional privileges.","exploitability":"Exploitation requires local access and no user interaction; it leverages improper delegation of authority within the app's internal logic.","blast_radius":"Successful exploitation could allow an unprivileged local attacker to gain elevated privileges, potentially compromising confidentiality, integrity, and availability of the affected system.","remediation":"Apply the vendor patch for CVE-2026-58970 when available; until then, restrict access to the AppTimeTracker component via SELinux policies or discretionary access controls to prevent unauthorized invocation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["confused-deputy","privilege-escalation","local-exploit","android"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:06:49.348Z"}}