Google Android Xr vulnerabilities

2 vulnerabilities

Known vulnerabilities in Google Android Xr, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2026-0072googleandroid_xr
EPSS score
0.12%
In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.10CVE-2026-28659googleandroid_xr
EPSS score
0.19%
In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.