Skip to content
OpenAdvisories
Medium · 4.0 CVE-2026-59006 EUVD-2026-115428GHSA-mm6m-449h-686f

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to l…

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15, 14 —

Advisories 2

References