Local Privilege Escalation Vulnerability in Android's NfcService by Google

CVE-2026-58994

What is CVE-2026-58994?

A vulnerability in the NfcService component of Android allows for a potential local privilege escalation. The flaw arises from multiple functions within NfcService.java that lack proper permission checks. This weakness can be exploited without requiring user interaction, potentially enabling unauthorized users to gain elevated privileges within the system. This situation underscores the importance of maintaining updated security protocols and scrutinizing application permissions to mitigate risks.

References