A logic error in the updateInputWindows function of InputMonitor.java may allow a tapjacking vulnerability. This flaw could enable a local attacker to escalate privileges without requiring additional execution privileges. Exploitation requires user interaction.