XR vulnerabilities

CVEs whose affected-version data names the XR package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-58873High· 8.4

4d ago

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…

▾ TwilightGoogle · XREPSS 0.13%via CVEORG