{"id":"CVE-2026-58962","kind":"vulnerability","aliases":["CVE-2026-58962"],"related":[],"title":"Android: missing permission check lets a local app escalate privileges","description":"In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A missing permission check in the Android task manager's moveTaskToFrontLocked function lets a local app bypass access controls. An attacker gets local privilege escalation without extra execution rights and without user interaction.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"android","fixed":["security patch level 2026-11-05"],"affected":"14, 15, 16, 16-qpr2, 17 before security patch level 2026-11-05","ecosystem":"vendor"}],"ecosystems":[],"tags":["android","framework","mobile","runtime"],"not_affected_if":[],"how_to_check":"Settings > About phone > Android version > Android security update: a patch level older than 2026-11-05 is not confirmed fixed. Or run: adb shell getprop ro.build.version.security_patch. Devices on Android 13 or earlier are not listed in the bulletin; ask the manufacturer.","fix":"Install a security patch level of 2026-11-05 or later (bulletin lists the issue under the 2026-11-01 level). Fixes apply to Android 14, 15, 16, 16-qpr2 and 17.","status":"open","published_at":"2026-11-02T20:17:52+00:00","first_seen_at":"2026-11-02T20:35:34+00:00","triaged_at":"2026-11-02T20:38:35+00:00","updated_at":"2026-11-02T20:39:21+00:00","category":"runtime","confidence":0.85,"triage":{"at":"2026-11-02T20:38:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: missing permission check lets a local app escalate privileges","impact":"high","summary":"A missing permission check in the Android task manager's moveTaskToFrontLocked function lets a local app bypass access controls. An attacker gets local privilege escalation without extra execution rights and without user interaction.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["android","mobile"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"A local app gains elevated system privileges on the device.","analyst_note":"Confirm affected Android versions and the patch level that fixes it from the Android security bulletin, which the NVD entry does not give.","how_to_check":"- Look up the Android security patch level on the device (Settings > About phone) and compare it with the Android security bulletin, which the sources do not link.\n- unknown","plain_action":"Install the latest Android security update on your phone and check Settings > Security & privacy > System update.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Android devices with the affected ActivityTaskManagerService code, which the sources do not name by version. Fleet owners should check their Android patch levels; devices that receive no further Android updates remain exposed. unknown for exact affected versions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000655,"input_tokens":4110,"output_tokens":488,"severity_before":"unknown"},"analyst_status":"done","analyst_note":"Confirm affected Android versions and the patch level that fixes it from the Android security bulletin, which the NVD entry does not give.","search":"'-2026':12A,15A '-58962':13A,16A 'access':39B 'activitytaskmanagerservice.java':58C 'addit':81C 'android':1A,17A,18B,28B 'app':8A,37B 'attack':42B 'bypass':38B,64C 'check':4A,25B,70C 'control':40B 'could':72C 'cve':11A,14A 'due':65C 'escal':9A,46B,76C 'execut':49B,82C 'exploit':91C 'extra':48B 'framework':19B 'function':33B 'get':43B 'interact':54B,86C 'lead':73C 'let':5A,34B 'local':7A,36B,44B,75C 'manag':30B 'miss':2A,23B,68C 'mobil':20B 'movetasktofrontlock':32B,56C 'need':84C,89C 'permiss':3A,24B,63C,69C 'possibl':62C 'privileg':10A,45B,78C,83C 'right':50B 'runtim':21B 'task':29B 'user':53B,85C 'without':47B,52B","nicknames":[],"mitigations":[],"who_affected":"Android phones and tablets running Android 14, 15, 16 or 17 (the versions the November 2026 bulletin lists) with a security patch level older than 2026-11-05. A local app can exploit it without user interaction or extra privileges. Devices that no longer get updates stay exposed; managed fleets should check patch levels.","tier":"B","verified":{"fix":{"at":"2026-11-02T20:39:21Z","by":"analyst","doc":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","run_id":1423},"products":{"at":"2026-11-02T20:39:21Z","by":"analyst","doc":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","run_id":1423},"how_to_check":{"at":"2026-11-02T20:39:21Z","by":"analyst","doc":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","run_id":1423},"who_affected":{"at":"2026-11-02T20:39:21Z","by":"analyst","doc":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","run_id":1423}},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Install the latest Android security update on your phone: Settings > System > System update (the exact menu varies by maker).","pkeys":["android"],"ptokens":["android"],"labels":["android","framework","high","mobile","runtime"],"first_public_at":"2026-11-02T20:17:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58962","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58962","severity":null,"published_at":"2026-11-02T20:17:52+00:00","modified_at":"2026-11-02T20:17:52+00:00","first_seen_at":"2026-11-02T20:35:34+00:00","fetched_at":"2026-11-02T20:35:34+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-58962:1423","url":null,"severity":null,"published_at":"2026-11-02T20:39:21+00:00","modified_at":"2026-11-02T20:39:21+00:00","first_seen_at":"2026-11-02T20:39:21+00:00","fetched_at":"2026-11-02T20:39:21+00:00","note":"Found in Android Security Bulletin Nov 2026 (framework, EoP, High, bug A-527035781, AOSP 14-17). Patch level 2026-11-05 or later covers all issues; listed under 2026-11-01 section. No exploitation stated; AOSP links pending."}],"documents":[{"id":53783,"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","title":"Android Security Bulletin—November 2026","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}