EUVD-2026-79013

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58734

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58734

CVE-2026-58734 affects the GDMC (Google Device Management Component) subcomponent on Google Pixel devices. The vulnerability resides in the google_mba_recv_msg function within google_mba_poll.c, where a race condition can trigger an out-of-bounds write , enabling local elevation of privilege with...

CVE-2026-58728

CVE-2026-58728 is a Critical elevation of privilege (EoP) vulnerability in the Trusty subcomponent of Google Pixel devices, specifically in the ARM64_TLBI function of mmu.h . The root cause is a race condition that can lead to memory corruption , enabling local privilege escalation with no additi...

EUVD-2026-79011

In ARM64TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58728

In ARM64TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79009

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58724

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58724

CVE-2026-58724 affects Android Pixel devices (tracked as PUB-A-522373968 in the Android Pixel Security Bulletin of 2026-09-01). The root cause is a use-after-free due to a race condition in multiple locations, classified by Rapid7 as Concurrent Execution using Shared Resource with Improper Synchr...

CVE-2026-58716

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58716

CVE-2026-58716 is a Critical local elevation-of-privilege vulnerability in the GSA (Google Security Architecture) subcomponent on supported Google Pixel devices. The root cause is a time-of-check to time-of-use (TOCTOU) race condition present in multiple locations, which can be exploited without ...

EUVD-2026-79006

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79003

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

CVE-2026-58701 is a Critical -severity elevation of privilege vulnerability in the Trusty Trusted Execution Environment on Google Pixel devices. The root cause is an out-of-bounds write in the trusty_dputc function of generic-arm64-smcall.c, triggered by a race condition . Exploitation requires S...

CVE-2026-58701

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78986

In multiple functions of bluetoothcco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56988

CVE-2026-56988 is a use-after-free vulnerability in bluetooth_cco.cc (Bluetooth CCO component) of Android (Pixel) , caused by a race condition . The flaw can lead to local escalation of privilege , requiring System execution privileges and no user interaction . CISA's SSVC assessment rates exploi...

CVE-2026-56988

In multiple functions of bluetoothcco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56964

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56964

CVE-2026-56964 is a use-after-free vulnerability caused by a race condition in multiple locations within Android (Pixel devices) , as disclosed in the September 2026 Pixel Security Bulletin . The flaw could enable a local privilege escalation with System execution privileges required; no user int...