CVSS Score
8.4
Description
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Weakness Classification (CWE)
CWE-862
Missing Authorization
Primary Sources
Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.
Does this affect your version?
Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.
CVE data aggregated from the National Vulnerability Database (NVD, public domain) and enriched by dbcve.org.