CVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission

November 2, 2026 Yanac

A vulnerability classified as very critical was found in Google Android XR 14. This vulnerability affects the function addDragDropListener of the file WindowManagerService.java of the component WindowManagerService. Such manipulation leads to permission issues.

This vulnerability is documented as CVE-2026-58873. The attack needs to be performed locally. There is not any exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More