Android Activity Token Leak Vulnerability in TaskFragmentOrganizerController Allowing Privilege Escalation
Vulnerability
A vulnerability has been identified in Android's TaskFragmentOrganizerController.java, where a logic error may cause an activity token leak. This issue could lead to local privilege escalation without requiring additional execution privileges or user interaction.
Impact
Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.
Added: Mar 2, 2026, 7:41 PM
Updated: Mar 2, 2026, 9:01 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
3.3remediation
0.0relevance
3.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.