CVE-2026-49883
Missing Permission Check Enables Local Information Disclosure on Android Wear
In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS 4.0 · 10 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products