CVE-2026-0036
StageCoordinator.java Tapjacking Local Privilege Escalation
Publication date: 2026-06-01
Last updated on: 2026-06-01
Assigner: Android (associated with Google Inc. or Open Handset Alliance)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the startAnimation method of the StageCoordinator.java file. It is a tapjacking issue caused by a tapjacking or overlay attack.
Tapjacking is a technique where an attacker tricks a user into tapping on something different from what the user perceives, often by overlaying malicious content.
In this case, the vulnerability could allow an attacker to escalate privileges locally without needing any additional execution privileges or user interaction.
How can this vulnerability impact me? :
This vulnerability can lead to local escalation of privilege, meaning an attacker could gain higher-level access on the affected device or system.
Since no user interaction is needed for exploitation, the attacker could potentially exploit this vulnerability silently.