Google Android XR vulnerabilities

3 published CVEs name Google Android XR among the affected products.

Critical 2High 1Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-58873
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local…
Google · Android XR
High8.4
CVE-2026-28659
In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege…
Google · Android XR
Critical10.0
CVE-2026-0072
In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation…
Google · Android XR
Critical10.0