Live › vulnerability › CVE-2026-55257
UsbDialogHelper, the Android Java class that shows USB permission prompts, can display misleading or insufficient UI. The description says this could lead to local privilege escalation without extra execution privileges and without user interaction.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
The description names only UsbDialogHelper.java and does not list affected Android versions or builds, so the sources do not say which devices are exposed. Check the vendor's Android security bulletin for your device model before assuming you are covered.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-55257")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.