UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-49903
The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE_STATS`, acts as a confused deputy. It allows attackers to write arbitrary values to `Settings.Global.OVERLAY_DISPLAY_DEVICES`, an operation normally requiring `android.permission.WRITE_SECURE_SETTINGS`, enabling persistent creation of system overlay displays and injection of key events into the cluster UI.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-11-04T01:29:06.847378+00:00
- Epss score
- 0.00144
- Cve id
- CVE-2026-49903
- First seen by Signal
- 2026-11-03T00:56:41+00:00
- Name
- CVE-2026-49903
- Retrieved at
- 2026-11-04T01:32:29+00:00
- Published at
- 2026-11-02T21:17:31.590
- Last modified
- 2026-11-03T14:52:42.467
- Epss percentile
- 0.03699
Explore deeper with Ninja Signal's threat intelligence graph