CVE-2026-58970 | Google Android up to 17 AppTimeTracker AppTimeTracker.java deliverResult privileges management

A vulnerability classified as very critical was found in Google Android 14/15/16/16-qpr2/17. This affects the function deliverResult of the file AppTimeTracker.java of the component AppTimeTracker. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-58970. Attacking locally is a requirement. No exploit is available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More