Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
🚨 HIGH: CVE-2026-28656 (CVSS 7.3) - Android tapjacking vulnerability in DeviceAdminAdd[.]java enables local privilege escalation. User interaction required. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/JQBNFZgtNI
Post summary
The tweet discloses CVE-2026-28656, a high-severity Android tapjacking vulnerability allowing local privilege escalation, and explicitly urges immediate patching.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | 14.0 | - | - | |
| OS | android | 15.0 | - | - | |
| OS | android | 16.0 | - | - | |
| OS | android | 16.0 | - | - |