A vulnerability in the Google Android WindowManagerService allows an attacker to perform a tapjack attack, resulting in local privilege escalation without requiring user interaction.

The flaw exists in the relayoutWindow function within WindowManagerService.java, where a missing permission check facilitates a tapjack attack that can be triggered by an unauthenticated local attacker.

This vulnerability carries a CVSS score of 7.3, indicating a high severity risk due to the potential for total impact on confidentiality, integrity, and availability. Successful exploitation allows a local attacker to escalate privileges, which could result in full device compromise, unauthorized access to sensitive application data, and the bypassing of critical security controls.

Immediate Action: Organizations and device administrators should monitor the official Google Android Security Bulletin for the release of security patches and apply them to all affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor system logs for unusual patterns related to window management service calls or unexpected elevation of privilege events.

Compensating Controls: While difficult to mitigate locally, ensuring that devices are restricted from installing applications from untrusted sources serves as a baseline defense against malicious software that could attempt to leverage this vulnerability.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Given the potential for local privilege escalation and the lack of required user interaction, this vulnerability poses a significant risk to the security posture of Android devices. Administrators must prioritize the deployment of vendor-supplied security updates to mitigate the risk of local compromise.