Android
- >= 14, < 14.0.0
- ~15
- ~16
- ~16-qpr2
A tapjacking vulnerability has been identified in the Android Framework component, specifically within the StageCoordinator class. This issue allows for a local escalation of privilege, with no additional execution privileges required. The vulnerability can be exploited without user interaction.
Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.
Users can update their devices to the June 2026 security patch level to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.