CVE-2026-56889

CVE-2026-56889 is an integer overflow vulnerability in Android (tracked as PUB-A-511556070) that allows a local escalation of privilege to System-level execution. The flaw exists in multiple unspecified locations. Exploitation requires System execution privileges but no user interaction. CNA-assi...

CVE-2026-56888

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56888

CVE-2026-56888 is a permission bypass vulnerability in Android/Pixel devices caused by side channel information disclosure in multiple locations. An attacker with local access and low privileges can exploit this to achieve local privilege escalation without requiring user interaction or additiona...

EUVD-2026-78958

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56881

In enablesegment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78956

In enablesegment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56881

CVE-2026-56881 is a local privilege escalation vulnerability in the enable_segment function of remap.c , caused by a logic error that allows a permission bypass . The vulnerability requires only low privileges and no user interaction to exploit, rated CVSS 7.8 (HIGH) . It is referenced in the Pix...

CVE-2026-55366

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55366

CVE-2026-55366 affects the IP Multimedia Subsystem (IMS) in Android Pixel devices, as indicated by the reference to the September 2026 Pixel security bulletin. The vulnerability stems from a logic error that enables an authentication bypass , potentially leading to remote privilege escalation wit...

EUVD-2026-78954

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78952

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359

CVE-2026-55359 is a permission bypass caused by a logic error in the GPCA subcomponent of Google Pixel devices. It allows a local escalation of privilege from a low-privilege user account to full device compromise, with no user interaction required. The Pixel Update Bulletin rates it as Critical ...

CVE-2026-55359

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55302

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79160

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55302

CVE-2026-55302 is a Critical -severity elevation of privilege vulnerability in the Bootloader of Google Pixel devices. The root cause is a permission bypass due to a logic error in multiple locations, allowing an attacker with System -level privileges to escalate further without user interaction....

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79155

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0194

CVE-2026-0194 is a local privilege escalation vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by an integer overflow that permits a permission bypass . No additional execution privileges or user interaction are required for exploitation. The Pixel Update B...

CVE-2026-0189

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...