UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-55264
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-02T20:58:11.011495+00:00
- Cve id
- CVE-2026-55264
- First seen by Signal
- 2026-11-02T20:53:23+00:00
- Retrieved at
- 2026-11-02T20:58:51+00:00
- Published at
- 2026-11-02T20:17:44.450
- Last modified
- 2026-11-02T20:17:44.450
Explore deeper with Ninja Signal's threat intelligence graph