UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-58957

In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Properties

Last source
NVD
Nvd fetched at
2026-11-02T20:58:11.011495+00:00
Cve id
CVE-2026-58957
First seen by Signal
2026-11-02T20:53:23+00:00
Retrieved at
2026-11-02T20:58:51+00:00
Published at
2026-11-02T20:17:52.280
Last modified
2026-11-02T20:17:52.280

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-58957 — Ninja Signal Threat Intelligence | Ninja Signal