{"id":"CVE-2026-58886","kind":"vulnerability","aliases":["CVE-2026-58886"],"related":[],"title":"Android: tapjacking flaw in input window handling lets an app escalate privileges","description":"In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","summary":"A logic error in updateInputWindows in Android's InputMonitor.java allows a tapjacking issue, where a user is tricked into tapping something they cannot see. The flaw can lead to local privilege escalation without extra execution privileges, but a user must interact with the attack.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","mobile","runtime"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:50+00:00","first_seen_at":"2026-11-02T20:35:32+00:00","triaged_at":"2026-11-02T20:38:48+00:00","updated_at":"2026-11-02T20:38:48+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-02T20:38:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: tapjacking flaw in input window handling lets an app escalate privileges","impact":"high","summary":"A logic error in updateInputWindows in Android's InputMonitor.java allows a tapjacking issue, where a user is tricked into tapping something they cannot see. The flaw can lead to local privilege escalation without extra execution privileges, but a user must interact with the attack.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["android","mobile"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"a local app gains elevated privileges on the device","analyst_note":"Confirm affected Android versions, patch level and fixed build from the Android Security Bulletin for this CVE; the NVD entry has no severity or version data.","how_to_check":"- unknown","plain_action":"Install the latest Android security update on your phone and check Settings > Security & privacy > System & updates for available updates.","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Android devices whose system framework contains the affected InputMonitor code. The sources do not name the affected Android versions or patch levels, so the exact exposure is unknown. Devices kept on a current security patch level are the ones that would have the fix.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000654,"input_tokens":4097,"output_tokens":489,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-58886':15A,18A 'addit':94C 'allow':31B 'android':1A,19B,28B 'app':10A 'attack':65B 'cannot':44B 'code':83C 'could':85C 'cve':13A,16A 'due':76C 'error':24B,80C 'escal':11A,53B,89C 'execut':56B,95C 'exploit':103C 'extra':55B 'flaw':3A,47B 'handl':7A 'input':5A 'inputmonitor.java':30B,69C 'interact':62B,99C 'issu':34B,75C 'lead':49B,86C 'let':8A 'local':51B,88C 'logic':23B,79C 'mobil':20B 'must':61B 'need':97C,101C 'possibl':73C 'privileg':12A,52B,57B,91C,96C 'runtim':21B 'see':45B 'someth':42B 'tap':41B 'tapjack':2A,33B,74C 'trick':39B 'updateinputwindow':26B,67C 'user':37B,60B,98C 'window':6A 'without':54B","nicknames":[],"mitigations":[],"who_affected":"Android devices whose system framework contains the affected InputMonitor code. The sources do not name the affected Android versions or patch levels, so the exact exposure is unknown. Devices kept on a current security patch level are the ones that would have the fix.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","mobile","runtime","unknown"],"first_public_at":"2026-11-02T20:17:50+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58886","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58886","severity":null,"published_at":"2026-11-02T20:17:50+00:00","modified_at":"2026-11-02T20:17:50+00:00","first_seen_at":"2026-11-02T20:35:32+00:00","fetched_at":"2026-11-02T20:35:32+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}