android_xr vulnerabilities

CVEs whose affected-version data names the android_xr package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-28659High· 7.8⚖ disputed

2w ago

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed …

▾ Twilightgoogle · android_xrEPSS 0.13%via NVD