Permission Bypass Vulnerability in Android's PresentationController Component
CVE-2026-58979

Currently unrated

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
2 November 2026

What is CVE-2026-58979?

A logic error in the canPresent method of PresentationController.java creates a vulnerability that allows for a potential permission bypass. This flaw enables local escalation of privileges without requiring any additional execution rights or user interaction. As a result, unauthorized access to restricted functionalities could be exploited, posing significant security risks within affected Android systems.

Affected Version(s)

Android 17

References

https://source.android.com/docs/security/bulletin/2026/20...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.