CVE-2026-56972

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56972

CVE-2026-56972 is an out-of-bounds write vulnerability in the Bootloader of Google Pixel devices, caused by an incorrect bounds check in multiple locations. It enables local escalation of privilege (EoP) when an attacker already holds System execution privileges ; no user interaction is required....

CVE-2026-56964

CVE-2026-56964 affects Google Pixel devices (per the 2026-09-01 Pixel security bulletin and the associated OSV entry PUB-A-508692752 ). The root cause is a use-after-free due to a race condition in multiple unspecified locations within the Android system. Successful exploitation yields local priv...

CVE-2026-56950

CVE-2026-56950 is a local information disclosure vulnerability in the validate_ns_buf function of mbu_class.rs , caused by improper input validation . It requires System execution privileges and no user interaction, rated CVSS 4.4 (MEDIUM) . The CNA is Samsung (dsap-vuln-management), and the fix ...

CVE-2026-56932

CVE-2026-56932 is a memory corruption vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by improper input validation . An attacker with System-level privileges can exploit it for local privilege escalation (EoP) without user interaction. The Pixel Update Bul...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

CVE-2026-56922 is a permission bypass in the CPM (Camera Processing Module) component of Google Pixel devices, caused by a confused deputy flaw. It enables local escalation of privilege with System execution privileges required and no user interaction needed. The Pixel Security Bulletin rates thi...

EUVD-2026-78963

In bigoworkerthread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78961

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78959

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

CVE-2026-56889 is an integer overflow vulnerability in Android (tracked as PUB-A-511556070) that allows a local escalation of privilege to System-level execution. The flaw exists in multiple unspecified locations. Exploitation requires System execution privileges but no user interaction. CNA-assi...

EUVD-2026-78955

In gmcmbmsghandler of gmcmba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78953

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55365

CVE-2026-55365 is an out-of-bounds write in multiple functions of remap.c in the Bootloader component of Google Pixel devices, caused by an incorrect bounds check. It enables local escalation of privilege (EoP) with System execution privileges required and no user interaction. Google rates it Cri...

CVE-2026-55365

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55332

CVE-2026-55332 is an out-of-bounds write vulnerability in multiple locations within Android (referenced in the Pixel September 2026 security bulletin), caused by improper input validation . It allows local escalation of privilege but requires System-level execution privileges and needs no user in...

EUVD-2026-78949

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78945

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...