In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
No data.
No data.
References
History
Mon, 02 Nov 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| Vendors & Products |
Google
Google android |
Mon, 02 Nov 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Privilege Escalation in Android AllowBindAppWidgetActivity Due to Misleading Consent UI | |
| Weaknesses | CWE-639 CWE-862 |
Mon, 02 Nov 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2026-11-02T19:53:25.067Z
Updated: 2026-11-02T19:53:25.067Z
Reserved: 2026-06-16T17:37:58.180Z
Link: CVE-2026-55263
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-02T20:17:44.330
Modified: 2026-11-02T20:17:44.330
Link: CVE-2026-55263
Redhat
No data.