Threats tagged 'ghsa-gqff-qxrp-c57r'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.8	CVE-2026-58836In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass High7.82026-11-02GCVE DatabaseCVE-2026-58836 A vulnerability in the handlePackagePostInstall function of InstallPackageHelper.java allows a sideloaded application to bypass Enhanced Confirmation Mode (ECM) and modify the package source during a self-update. This logic error can lead to local privilege escalation without requiring user interaction. Report on CVE-2026-58836 Vulnerability CWE-693 #ghsa-gqff-qxrp-c57r	GCVE Database	2026-11-02

Page 1 of 1