All security reports
NVD security advisory

Security advisory for CVE-2026-58873

CVE-2026-58873

Full advisory details, affected packages, severity context, and original source.

Affected technology

CVE-2026-58873Java ecosystem

Advisory overview

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account