NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-0072
Summary

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Publication Date June 2, 2026, 4:16 a.m.
Registration Date June 3, 2026, 4:14 a.m.
Last Update June 2, 2026, 10:04 p.m.
Related information, measures and tools
Common Vulnerabilities List