CVE-2026-58946 | Google Android 16/16-qpr2/17 ActivityClientController ActivityClientController.java navigateUpTo privileges management
A vulnerability was found in Google Android 16/16-qpr2/17 and classified as very critical. This vulnerability affects the function navigateUpTo of the file ActivityClientController.java of the component ActivityClientController. Such manipulation leads to improper privilege management.
This vulnerability is referenced as CVE-2026-58946. The attack can only be performed from a local environment. No exploit is available.
It is best practice to apply a patch to resolve this issue.