Threats tagged 'ghsa-52wh-cjj6-535h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-49903The ClusterRenderingService.dump() method, accessible to processes holding android.permission.DUMP and High2026-11-02GCVE DatabaseCVE-2026-49903 The ClusterRenderingService.dump() method in Android can be exploited by processes with android.permission.DUMP and android.permission.PACKAGE_USAGE_STATS to write arbitrary values to Settings.Global.OVERLAY_DISPLAY_DEVICES. This action normally requires the higher privilege android.permission.WRITE_SECURE_SETTINGS. Exploitation enables persistent creation of system overlay displays and injection of key events into the cluster UI. Report on CVE-2026-49903 Vulnerability #ghsa-52wh-cjj6-535h	GCVE Database	2026-11-02

Page 1 of 1