CVE-2026-58767

CVE-2026-58767 is a local privilege escalation vulnerability in multiple functions of arm-smmu-v3.c in the Android kernel, caused by a logic error . An attacker with System execution privileges can exploit it without user interaction to gain higher privileges, resulting in high impact to confiden...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79019

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58755

CVE-2026-58755 is a local privilege escalation vulnerability in the ARM SMMU-v3 driver (smmu_install_nested_ste in arm-smmu-v3.c) affecting Android Pixel devices , as referenced in the Pixel September 2026 security bulletin. The root cause is a logic error in the nested STE installation path. An ...

CVE-2026-58751

CVE-2026-58751 is a use-after-free vulnerability in multiple functions of arm-smmu-v3.c (the ARM System MMU v3 driver), caused by a logic error. The flaw allows local escalation of privilege to System execution privileges, with no user interaction required. The vulnerability is tracked in the And...

CVE-2026-58739

CVE-2026-58739 is a confused deputy vulnerability in platform_msg_handler_init of default_msg_handlers.c within the GDMC subcomponent of Google Pixel devices. It enables a local elevation of privilege requiring System execution privileges and no user interaction. The Pixel Update Bulletin rates i...

CVE-2026-58726

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79009

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58724

CVE-2026-58724 is a use-after-free vulnerability in Android Pixel devices, caused by a race condition in multiple locations. It permits local privilege escalation requiring System execution privileges, with no user interaction needed. The CNA-assigned CVSS 3.1 score is 7.0 (HIGH) , reflecting hig...

CVE-2026-58724

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58721

CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79008

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58716

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58716

CVE-2026-58716 is a time-of-check to time-of-use (TOCTOU) race condition in the GSA (Google Secure Architecture) component of Google Pixel devices, classified as a Critical severity elevation of privilege (EoP). The vulnerability requires System execution privileges and no user interaction, enabl...

EUVD-2026-79006

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

CVE-2026-58701 affects the Trusty Trusted Execution Environment on Google Pixel devices. The vulnerable code is in the trusty_dputc function within generic-arm64-smcall.c , where a race condition can lead to an out-of-bounds write , enabling local elevation of privilege. Exploitation requires Sys...

EUVD-2026-79001

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58698

CVE-2026-58698 is a confused deputy vulnerability in the ap_pmic_poll_msg_handler function of ap_pmic_ipc.c, allowing a local escalation of privilege when the attacker already holds System execution privileges . No user interaction is required. The flaw is tied to the Android Pixel security bulle...

EUVD-2026-79000

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...