CVE-2026-58934 | Google Android up to 17 WindowState WindowState.java prepareWindowToDisplayDuringRelayout permission

A vulnerability was found in Google Android 14/15/16/16-qpr2/17. It has been declared as very critical. This vulnerability affects the function prepareWindowToDisplayDuringRelayout of the file WindowState.java of the component WindowState. Executing a manipulation can lead to permission issues.

The identification of this vulnerability is CVE-2026-58934. The attack can only be executed locally. There is no exploit available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More