Vulnerabilities

In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.

In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google

Product

Android

Exposure class

Mobile OS

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-58867 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 17
   CVE NVD 27h ago

   In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-58873 Google
2. 17
   CVE NVD 28h ago

   In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-59012 Google
3. 17
   CVE NVD 28h ago

   In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-58994 Google
4. 24
   CVE NVD 28h ago

   In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check.

   CVE-2026-58989 Google
5. 17
   CVE NVD 28h ago

   In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-58986 Google
6. 17
   CVE NVD 28h ago

   In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-58969 Google
7. 17
   CVE NVD 28h ago

   In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-58962 Google
8. 17
   CVE NVD 28h ago

   In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.

   CVE-2026-58870 Google