{"id":"CVE-2026-28572","title":"In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack","summary":"In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-601"],"vendor":"google","product":"android","affected":["android = 16.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:30:10.153","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28572","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00088,"epssPercentile":0.00369,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:56:58.558865Z"},"ingestedAt":"2026-09-08T19:08:49.643Z","slug":"CVE-2026-28572","body":"## Overview\n\nIn onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 16.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201491,"id":"CVE-2026-28572","ts":1789399510799,"field":"cvss","old":null,"new":"7.8"},{"seq":201490,"id":"CVE-2026-28572","ts":1789399510799,"field":"severity","old":"none","new":"high"},{"seq":200225,"id":"CVE-2026-28572","ts":1789397086192,"field":"cvss","old":"7.8","new":null},{"seq":200224,"id":"CVE-2026-28572","ts":1789397086192,"field":"severity","old":"high","new":"none"},{"seq":198149,"id":"CVE-2026-28572","ts":1789391738321,"field":"cvss","old":null,"new":"7.8"},{"seq":198148,"id":"CVE-2026-28572","ts":1789391738321,"field":"severity","old":"none","new":"high"},{"seq":195942,"id":"CVE-2026-28572","ts":1789383399287,"field":"cvss","old":"7.8","new":null},{"seq":195941,"id":"CVE-2026-28572","ts":1789383399287,"field":"severity","old":"high","new":"none"},{"seq":194871,"id":"CVE-2026-28572","ts":1789380300319,"field":"cvss","old":null,"new":"7.8"},{"seq":194870,"id":"CVE-2026-28572","ts":1789380300319,"field":"severity","old":"none","new":"high"},{"seq":193658,"id":"CVE-2026-28572","ts":1789378268811,"field":"cvss","old":"7.8","new":null},{"seq":193657,"id":"CVE-2026-28572","ts":1789378268811,"field":"severity","old":"high","new":"none"},{"seq":192445,"id":"CVE-2026-28572","ts":1789376233193,"field":"cvss","old":null,"new":"7.8"},{"seq":192444,"id":"CVE-2026-28572","ts":1789376233193,"field":"severity","old":"none","new":"high"},{"seq":191232,"id":"CVE-2026-28572","ts":1789373126506,"field":"cvss","old":"7.8","new":null},{"seq":191231,"id":"CVE-2026-28572","ts":1789373126506,"field":"severity","old":"high","new":"none"},{"seq":190017,"id":"CVE-2026-28572","ts":1789369120926,"field":"cvss","old":null,"new":"7.8"},{"seq":190016,"id":"CVE-2026-28572","ts":1789369120926,"field":"severity","old":"none","new":"high"},{"seq":188804,"id":"CVE-2026-28572","ts":1789368038252,"field":"cvss","old":"7.8","new":null},{"seq":188803,"id":"CVE-2026-28572","ts":1789368038252,"field":"severity","old":"high","new":"none"},{"seq":187587,"id":"CVE-2026-28572","ts":1789364996430,"field":"cvss","old":null,"new":"7.8"},{"seq":187586,"id":"CVE-2026-28572","ts":1789364996430,"field":"severity","old":"none","new":"high"},{"seq":186374,"id":"CVE-2026-28572","ts":1789363002285,"field":"cvss","old":"7.8","new":null},{"seq":186373,"id":"CVE-2026-28572","ts":1789363002285,"field":"severity","old":"high","new":"none"},{"seq":185160,"id":"CVE-2026-28572","ts":1789360969620,"field":"cvss","old":null,"new":"7.8"},{"seq":185159,"id":"CVE-2026-28572","ts":1789360969620,"field":"severity","old":"none","new":"high"},{"seq":183947,"id":"CVE-2026-28572","ts":1789357943309,"field":"cvss","old":"7.8","new":null},{"seq":183946,"id":"CVE-2026-28572","ts":1789357943309,"field":"severity","old":"high","new":"none"},{"seq":182199,"id":"CVE-2026-28572","ts":1789354097807,"field":"cvss","old":null,"new":"7.8"},{"seq":182198,"id":"CVE-2026-28572","ts":1789354097807,"field":"severity","old":"none","new":"high"},{"seq":180992,"id":"CVE-2026-28572","ts":1789352943259,"field":"cvss","old":"7.8","new":null},{"seq":180991,"id":"CVE-2026-28572","ts":1789352943259,"field":"severity","old":"high","new":"none"},{"seq":179785,"id":"CVE-2026-28572","ts":1789349998574,"field":"cvss","old":null,"new":"7.8"},{"seq":179784,"id":"CVE-2026-28572","ts":1789349998574,"field":"severity","old":"none","new":"high"},{"seq":178578,"id":"CVE-2026-28572","ts":1789347814216,"field":"cvss","old":"7.8","new":null},{"seq":178577,"id":"CVE-2026-28572","ts":1789347814216,"field":"severity","old":"high","new":"none"},{"seq":177371,"id":"CVE-2026-28572","ts":1789346180273,"field":"cvss","old":null,"new":"7.8"},{"seq":177370,"id":"CVE-2026-28572","ts":1789346180273,"field":"severity","old":"none","new":"high"},{"seq":176164,"id":"CVE-2026-28572","ts":1789342751895,"field":"cvss","old":"7.8","new":null},{"seq":176163,"id":"CVE-2026-28572","ts":1789342751895,"field":"severity","old":"high","new":"none"},{"seq":175948,"id":"CVE-2026-28572","ts":1789342358410,"field":"cvss","old":null,"new":"7.8"},{"seq":175947,"id":"CVE-2026-28572","ts":1789342358410,"field":"severity","old":"none","new":"high"},{"seq":175488,"id":"CVE-2026-28572","ts":1789338389913,"field":"cvss","old":"7.8","new":null},{"seq":175487,"id":"CVE-2026-28572","ts":1789338389913,"field":"severity","old":"high","new":"none"},{"seq":174283,"id":"CVE-2026-28572","ts":1789334603012,"field":"cvss","old":null,"new":"7.8"},{"seq":174282,"id":"CVE-2026-28572","ts":1789334603012,"field":"severity","old":"none","new":"high"},{"seq":173078,"id":"CVE-2026-28572","ts":1789333197325,"field":"cvss","old":"7.8","new":null},{"seq":173077,"id":"CVE-2026-28572","ts":1789333197325,"field":"severity","old":"high","new":"none"},{"seq":171892,"id":"CVE-2026-28572","ts":1789330882878,"field":"cvss","old":null,"new":"7.8"},{"seq":171891,"id":"CVE-2026-28572","ts":1789330882878,"field":"severity","old":"none","new":"high"}]}