CVE-2026-58716

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701

A race condition in trusty_dputc of generic-arm64-smcall.c allows for a possible out-of-bounds write . This vulnerability could lead to a local escalation of privilege , requiring System execution privileges . No user interaction is required for exploitation. The issue affects the Trusty componen...

EUVD-2026-79001

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58698

A permission bypass vulnerability exists in the ap_pmic_poll_msg_handler function within the ap_pmic_ipc.c component. This issue is caused by a confused deputy scenario, which could allow an attacker to achieve a local escalation of privilege to System execution privileges . Exploitation of this ...

CVE-2026-58698

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79000

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78996

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

A logic error in the Bootloader component allows for a permission bypass , which could lead to a local escalation of privilege requiring System execution privileges . This vulnerability affects Google Pixel devices. Exploitation does not require user interaction. Security patch levels of 2026-09-...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78995

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57042

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78994

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

A missing bounds check in multiple locations leads to a possible out-of-bounds write . This vulnerability could facilitate local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Specific details regarding affected products, compone...

EUVD-2026-78990

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57006

A logic error in the acfw_ffa.c component of the ACFW subcomponent enables a secret read vulnerability. This flaw could lead to local information disclosure , requiring System execution privileges for exploitation. No user interaction is required. Remediation for affected Pixel devices is include...

CVE-2026-57006

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56992

A permission bypass vulnerability exists in the AP ROM of Google Pixel devices due to a confused deputy issue in multiple files. This flaw could allow for local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction. Impact is categorized as...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...