{"schema_version":"2","view":"grouped","data":[{"id":22214,"cve_ids":["CVE-2022-20572"],"payload":{"kind":"advisory","title":"CVE-2022-20572","summary":"In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel","evidence":"cve:CVE-2022-20572","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20572","aliases":["CVE-2022-20572"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:26.516Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:17:52.907Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-20572","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-18T14:54:56.663015Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-18T14:55:15.950Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:26.516Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-12-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20572","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a65a7e72-eb27-4f2c-a562-4749d9da50c3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20572","advisory_id":"a65a7e72-eb27-4f2c-a562-4749d9da50c3","event_types":["advisory"],"published_at":"2026-10-25T05:55:46.640688+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-12-16T00:00:00+00:00","detail_url":"/advisories/advisory%3Aa65a7e72-eb27-4f2c-a562-4749d9da50c3","group":{"id":"advisory:a65a7e72-eb27-4f2c-a562-4749d9da50c3","revision":1,"primary_event_id":22055,"change":"published","superseded_by":[],"changed":{"id":22055,"cve_ids":["CVE-2022-20572"],"payload":{"kind":"advisory","title":"CVE-2022-20572","summary":"In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel","evidence":"cve:CVE-2022-20572","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20572","aliases":["CVE-2022-20572"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:26.516Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:17:52.907Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-20572","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-18T14:54:56.663015Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-18T14:55:15.950Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:26.516Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-12-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20572","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a65a7e72-eb27-4f2c-a562-4749d9da50c3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20572","advisory_id":"a65a7e72-eb27-4f2c-a562-4749d9da50c3","event_types":["advisory"],"published_at":"2026-10-25T05:55:46.640688+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-12-16T00:00:00+00:00","detail_url":"/events/22055"},"members":[{"id":22055,"cve_ids":["CVE-2022-20572"],"payload":{"kind":"advisory","title":"CVE-2022-20572","summary":"In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel","evidence":"cve:CVE-2022-20572","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20572","aliases":["CVE-2022-20572"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:26.516Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:17:52.907Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-20572","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-18T14:54:56.663015Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-18T14:55:15.950Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:26.516Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-12-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20572","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a65a7e72-eb27-4f2c-a562-4749d9da50c3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20572","advisory_id":"a65a7e72-eb27-4f2c-a562-4749d9da50c3","event_types":["advisory"],"published_at":"2026-10-25T05:55:46.640688+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-12-16T00:00:00+00:00","detail_url":"/events/22055"}]}},{"id":22213,"cve_ids":["CVE-2022-20566"],"payload":{"kind":"advisory","title":"CVE-2022-20566","summary":"In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel","evidence":"cve:CVE-2022-20566","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20566","aliases":["CVE-2022-20566"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:25.316Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:17:52.898Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-20566","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-21T13:04:29.660645Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-667","description":"CWE-667 Improper Locking"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-21T13:05:26.287Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:25.316Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-12-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20566","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:71777a45-1282-4332-8e71-175a97c5f28c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20566","advisory_id":"71777a45-1282-4332-8e71-175a97c5f28c","event_types":["advisory"],"published_at":"2026-10-25T05:55:46.060319+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-12-16T00:00:00+00:00","detail_url":"/advisories/advisory%3A71777a45-1282-4332-8e71-175a97c5f28c","group":{"id":"advisory:71777a45-1282-4332-8e71-175a97c5f28c","revision":1,"primary_event_id":22054,"change":"published","superseded_by":[],"changed":{"id":22054,"cve_ids":["CVE-2022-20566"],"payload":{"kind":"advisory","title":"CVE-2022-20566","summary":"In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel","evidence":"cve:CVE-2022-20566","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20566","aliases":["CVE-2022-20566"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:25.316Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:17:52.898Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-20566","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-21T13:04:29.660645Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-667","description":"CWE-667 Improper Locking"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-21T13:05:26.287Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:25.316Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-12-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20566","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:71777a45-1282-4332-8e71-175a97c5f28c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20566","advisory_id":"71777a45-1282-4332-8e71-175a97c5f28c","event_types":["advisory"],"published_at":"2026-10-25T05:55:46.060319+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-12-16T00:00:00+00:00","detail_url":"/events/22054"},"members":[{"id":22054,"cve_ids":["CVE-2022-20566"],"payload":{"kind":"advisory","title":"CVE-2022-20566","summary":"In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-165329981References: Upstream kernel","evidence":"cve:CVE-2022-20566","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20566","aliases":["CVE-2022-20566"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:25.316Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:17:52.898Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-20566","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-21T13:04:29.660645Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-667","description":"CWE-667 Improper Locking"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-21T13:05:26.287Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:25.316Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-12-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20566","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:71777a45-1282-4332-8e71-175a97c5f28c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20566","advisory_id":"71777a45-1282-4332-8e71-175a97c5f28c","event_types":["advisory"],"published_at":"2026-10-25T05:55:46.060319+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-12-16T00:00:00+00:00","detail_url":"/events/22054"}]}},{"id":22211,"cve_ids":["CVE-2022-20422"],"payload":{"kind":"advisory","title":"CVE-2022-20422","summary":"In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel","evidence":"cve:CVE-2022-20422","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20422","aliases":["CVE-2022-20422"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:24.077Z","provider":"cve","references":["https://source.android.com/security/bulletin/2022-10-01","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2022-10-01","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:10:44.661Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-770721.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:24.077Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eec76969-9540-4e6d-aa5e-56ad80f90b61","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20422","advisory_id":"eec76969-9540-4e6d-aa5e-56ad80f90b61","event_types":["advisory"],"published_at":"2026-10-25T05:55:44.912065+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-10-11T00:00:00+00:00","detail_url":"/advisories/advisory%3Aeec76969-9540-4e6d-aa5e-56ad80f90b61","group":{"id":"advisory:eec76969-9540-4e6d-aa5e-56ad80f90b61","revision":1,"primary_event_id":22052,"change":"published","superseded_by":[],"changed":{"id":22052,"cve_ids":["CVE-2022-20422"],"payload":{"kind":"advisory","title":"CVE-2022-20422","summary":"In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel","evidence":"cve:CVE-2022-20422","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20422","aliases":["CVE-2022-20422"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:24.077Z","provider":"cve","references":["https://source.android.com/security/bulletin/2022-10-01","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2022-10-01","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:10:44.661Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-770721.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:24.077Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eec76969-9540-4e6d-aa5e-56ad80f90b61","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20422","advisory_id":"eec76969-9540-4e6d-aa5e-56ad80f90b61","event_types":["advisory"],"published_at":"2026-10-25T05:55:44.912065+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-10-11T00:00:00+00:00","detail_url":"/events/22052"},"members":[{"id":22052,"cve_ids":["CVE-2022-20422"],"payload":{"kind":"advisory","title":"CVE-2022-20422","summary":"In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel","evidence":"cve:CVE-2022-20422","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20422","aliases":["CVE-2022-20422"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T15:02:24.077Z","provider":"cve","references":["https://source.android.com/security/bulletin/2022-10-01","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2022-10-01","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:10:44.661Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-770721.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:02:24.077Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eec76969-9540-4e6d-aa5e-56ad80f90b61","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20422","advisory_id":"eec76969-9540-4e6d-aa5e-56ad80f90b61","event_types":["advisory"],"published_at":"2026-10-25T05:55:44.912065+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-10-11T00:00:00+00:00","detail_url":"/events/22052"}]}},{"id":22181,"cve_ids":["CVE-2022-20421"],"payload":{"kind":"advisory","title":"CVE-2022-20421","summary":"In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel","evidence":"cve:CVE-2022-20421","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20421","aliases":["CVE-2022-20421"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T14:53:09.981Z","provider":"cve","references":["https://source.android.com/security/bulletin/2022-10-01","https://www.debian.org/security/2022/dsa-5257","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2022-10-01","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5257","name":"DSA-5257","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:10:44.836Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-770721.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T14:53:09.981Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3a851665-a3be-4a7d-b34c-9ac7921f9141","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20421","advisory_id":"3a851665-a3be-4a7d-b34c-9ac7921f9141","event_types":["advisory"],"published_at":"2026-10-25T05:55:21.762018+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-10-11T00:00:00+00:00","detail_url":"/advisories/advisory%3A3a851665-a3be-4a7d-b34c-9ac7921f9141","group":{"id":"advisory:3a851665-a3be-4a7d-b34c-9ac7921f9141","revision":1,"primary_event_id":22022,"change":"published","superseded_by":[],"changed":{"id":22022,"cve_ids":["CVE-2022-20421"],"payload":{"kind":"advisory","title":"CVE-2022-20421","summary":"In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel","evidence":"cve:CVE-2022-20421","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20421","aliases":["CVE-2022-20421"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T14:53:09.981Z","provider":"cve","references":["https://source.android.com/security/bulletin/2022-10-01","https://www.debian.org/security/2022/dsa-5257","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2022-10-01","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5257","name":"DSA-5257","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:10:44.836Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-770721.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T14:53:09.981Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3a851665-a3be-4a7d-b34c-9ac7921f9141","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20421","advisory_id":"3a851665-a3be-4a7d-b34c-9ac7921f9141","event_types":["advisory"],"published_at":"2026-10-25T05:55:21.762018+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-10-11T00:00:00+00:00","detail_url":"/events/22022"},"members":[{"id":22022,"cve_ids":["CVE-2022-20421"],"payload":{"kind":"advisory","title":"CVE-2022-20421","summary":"In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel","evidence":"cve:CVE-2022-20421","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20421","aliases":["CVE-2022-20421"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-14T14:53:09.981Z","provider":"cve","references":["https://source.android.com/security/bulletin/2022-10-01","https://www.debian.org/security/2022/dsa-5257","https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2022-10-01","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5257","name":"DSA-5257","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html","name":"[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:10:44.836Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-770721.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T14:53:09.981Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-11-01T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-20421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3a851665-a3be-4a7d-b34c-9ac7921f9141","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20421","advisory_id":"3a851665-a3be-4a7d-b34c-9ac7921f9141","event_types":["advisory"],"published_at":"2026-10-25T05:55:21.762018+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-10-11T00:00:00+00:00","detail_url":"/events/22022"}]}},{"id":21599,"cve_ids":["CVE-2017-0663"],"payload":{"kind":"advisory","title":"CVE-2017-0663","summary":"A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.","evidence":"cve:CVE-2017-0663","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0663","aliases":["CVE-2017-0663"],"metrics":[],"affected":[{"vendor":"Google Inc.","product":"Android","versions":[{"status":"affected","version":"Android-4.4.4 Android-5.0.2 Android-5.1.1 Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2"}]}],"modified":"2026-10-14T06:30:13.447Z","provider":"cve","references":["https://source.android.com/security/bulletin/2017-06-01","https://security.gentoo.org/glsa/201711-01","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2017-06-01","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2017/dsa-3952","name":"DSA-3952","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/98877","name":"98877","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201711-01","name":"GLSA-201711-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securitytracker.com/id/1038623","name":"1038623","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T13:11:06.830Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T06:30:13.447Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2021-06-29T14:06:13.000Z"}}},"related_cves":[{"value":"CVE-2017-0663","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:003317cc-8d6c-48e5-9e9b-96b1e1a6e779","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2017-0663","advisory_id":"003317cc-8d6c-48e5-9e9b-96b1e1a6e779","event_types":["advisory"],"published_at":"2026-10-25T05:45:16.007438+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2017-06-14T13:00:00+00:00","detail_url":"/advisories/advisory%3A003317cc-8d6c-48e5-9e9b-96b1e1a6e779","group":{"id":"advisory:003317cc-8d6c-48e5-9e9b-96b1e1a6e779","revision":1,"primary_event_id":21449,"change":"published","superseded_by":[],"changed":{"id":21449,"cve_ids":["CVE-2017-0663"],"payload":{"kind":"advisory","title":"CVE-2017-0663","summary":"A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.","evidence":"cve:CVE-2017-0663","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0663","aliases":["CVE-2017-0663"],"metrics":[],"affected":[{"vendor":"Google Inc.","product":"Android","versions":[{"status":"affected","version":"Android-4.4.4 Android-5.0.2 Android-5.1.1 Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2"}]}],"modified":"2026-10-14T06:30:13.447Z","provider":"cve","references":["https://source.android.com/security/bulletin/2017-06-01","https://security.gentoo.org/glsa/201711-01","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2017-06-01","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2017/dsa-3952","name":"DSA-3952","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/98877","name":"98877","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201711-01","name":"GLSA-201711-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securitytracker.com/id/1038623","name":"1038623","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T13:11:06.830Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T06:30:13.447Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2021-06-29T14:06:13.000Z"}}},"related_cves":[{"value":"CVE-2017-0663","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:003317cc-8d6c-48e5-9e9b-96b1e1a6e779","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2017-0663","advisory_id":"003317cc-8d6c-48e5-9e9b-96b1e1a6e779","event_types":["advisory"],"published_at":"2026-10-25T05:45:16.007438+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2017-06-14T13:00:00+00:00","detail_url":"/events/21449"},"members":[{"id":21449,"cve_ids":["CVE-2017-0663"],"payload":{"kind":"advisory","title":"CVE-2017-0663","summary":"A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.","evidence":"cve:CVE-2017-0663","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0663","aliases":["CVE-2017-0663"],"metrics":[],"affected":[{"vendor":"Google Inc.","product":"Android","versions":[{"status":"affected","version":"Android-4.4.4 Android-5.0.2 Android-5.1.1 Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2"}]}],"modified":"2026-10-14T06:30:13.447Z","provider":"cve","references":["https://source.android.com/security/bulletin/2017-06-01","https://security.gentoo.org/glsa/201711-01","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/2017-06-01","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2017/dsa-3952","name":"DSA-3952","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/98877","name":"98877","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201711-01","name":"GLSA-201711-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securitytracker.com/id/1038623","name":"1038623","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T13:11:06.830Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T06:30:13.447Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2021-06-29T14:06:13.000Z"}}},"related_cves":[{"value":"CVE-2017-0663","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:003317cc-8d6c-48e5-9e9b-96b1e1a6e779","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2017-0663","advisory_id":"003317cc-8d6c-48e5-9e9b-96b1e1a6e779","event_types":["advisory"],"published_at":"2026-10-25T05:45:16.007438+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2017-06-14T13:00:00+00:00","detail_url":"/events/21449"}]}},{"id":16137,"cve_ids":["CVE-2022-20153"],"payload":{"kind":"advisory","title":"CVE-2022-20153","summary":"In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel","evidence":"cve:CVE-2022-20153","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20153","aliases":["CVE-2022-20153"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-08T21:14:08.500Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-06-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-06-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:02:30.956Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-20153","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T21:13:26.820527Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:14:08.500Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-06-15T13:18:50.000Z"}}},"related_cves":[{"value":"CVE-2022-20153","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9caa1a14-dbea-4a2b-b738-a10ae420b987","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20153","advisory_id":"9caa1a14-dbea-4a2b-b738-a10ae420b987","event_types":["advisory"],"published_at":"2026-10-25T01:10:20.283168+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-15T13:18:50+00:00","detail_url":"/advisories/advisory%3A9caa1a14-dbea-4a2b-b738-a10ae420b987","group":{"id":"advisory:9caa1a14-dbea-4a2b-b738-a10ae420b987","revision":1,"primary_event_id":16042,"change":"published","superseded_by":[],"changed":{"id":16042,"cve_ids":["CVE-2022-20153"],"payload":{"kind":"advisory","title":"CVE-2022-20153","summary":"In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel","evidence":"cve:CVE-2022-20153","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20153","aliases":["CVE-2022-20153"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-08T21:14:08.500Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-06-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-06-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:02:30.956Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-20153","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T21:13:26.820527Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:14:08.500Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-06-15T13:18:50.000Z"}}},"related_cves":[{"value":"CVE-2022-20153","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9caa1a14-dbea-4a2b-b738-a10ae420b987","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20153","advisory_id":"9caa1a14-dbea-4a2b-b738-a10ae420b987","event_types":["advisory"],"published_at":"2026-10-25T01:10:20.283168+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-15T13:18:50+00:00","detail_url":"/events/16042"},"members":[{"id":16042,"cve_ids":["CVE-2022-20153"],"payload":{"kind":"advisory","title":"CVE-2022-20153","summary":"In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222091980References: Upstream kernel","evidence":"cve:CVE-2022-20153","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20153","aliases":["CVE-2022-20153"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-08T21:14:08.500Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-06-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-06-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:02:30.956Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-20153","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T21:13:26.820527Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:14:08.500Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-06-15T13:18:50.000Z"}}},"related_cves":[{"value":"CVE-2022-20153","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9caa1a14-dbea-4a2b-b738-a10ae420b987","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20153","advisory_id":"9caa1a14-dbea-4a2b-b738-a10ae420b987","event_types":["advisory"],"published_at":"2026-10-25T01:10:20.283168+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-15T13:18:50+00:00","detail_url":"/events/16042"}]}},{"id":15972,"cve_ids":["CVE-2022-20154"],"payload":{"kind":"advisory","title":"CVE-2022-20154","summary":"In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel","evidence":"cve:CVE-2022-20154","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20154","aliases":["CVE-2022-20154"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-08T21:03:11.665Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-06-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-06-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:02:30.971Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-20154","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T20:54:23.415636Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:03:11.665Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-06-15T13:18:55.000Z"}}},"related_cves":[{"value":"CVE-2022-20154","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20154","advisory_id":"3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","event_types":["advisory"],"published_at":"2026-10-25T01:07:09.858686+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-15T13:18:55+00:00","detail_url":"/advisories/advisory%3A3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","group":{"id":"advisory:3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","revision":1,"primary_event_id":15879,"change":"published","superseded_by":[],"changed":{"id":15879,"cve_ids":["CVE-2022-20154"],"payload":{"kind":"advisory","title":"CVE-2022-20154","summary":"In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel","evidence":"cve:CVE-2022-20154","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20154","aliases":["CVE-2022-20154"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-08T21:03:11.665Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-06-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-06-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:02:30.971Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-20154","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T20:54:23.415636Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:03:11.665Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-06-15T13:18:55.000Z"}}},"related_cves":[{"value":"CVE-2022-20154","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20154","advisory_id":"3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","event_types":["advisory"],"published_at":"2026-10-25T01:07:09.858686+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-15T13:18:55+00:00","detail_url":"/events/15879"},"members":[{"id":15879,"cve_ids":["CVE-2022-20154"],"payload":{"kind":"advisory","title":"CVE-2022-20154","summary":"In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel","evidence":"cve:CVE-2022-20154","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-20154","aliases":["CVE-2022-20154"],"metrics":[],"affected":[{"vendor":"n/a","product":"Android","versions":[{"status":"affected","version":"Android kernel"}]}],"modified":"2026-10-08T21:03:11.665Z","provider":"cve","references":["https://source.android.com/security/bulletin/pixel/2022-06-01"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-06-01","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T02:02:30.971Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-20154","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T20:54:23.415636Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:03:11.665Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2022-06-15T13:18:55.000Z"}}},"related_cves":[{"value":"CVE-2022-20154","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-20154","advisory_id":"3bb3d3d0-e85e-48c7-9b3c-81ca39a60832","event_types":["advisory"],"published_at":"2026-10-25T01:07:09.858686+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-15T13:18:55+00:00","detail_url":"/events/15879"}]}},{"id":12187,"cve_ids":["CVE-2026-58704"],"payload":{"kind":"advisory","title":"CVE-2026-58704","summary":"In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58704","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58704","aliases":["CVE-2026-58704"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T18:14:21.429Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58704","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T03:55:54.211554Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2026-09-16","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704"}}}],"references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704","tags":["government-resource"]}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-693","description":"CWE-693 Protection Mechanism Failure"},{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T18:14:21.429Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-09-15T18:34:37.966Z"}}},"related_cves":[{"value":"CVE-2026-58704","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7bb7c694-4506-4224-8a86-4d6720e15dbf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[{"cve":"CVE-2026-58704","metrics":[],"products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","relationship":"advisory","known_exploited":true,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58704","advisory_id":"7bb7c694-4506-4224-8a86-4d6720e15dbf","event_types":["advisory"],"published_at":"2026-10-25T00:02:31.279399+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T18:34:37.966+00:00","detail_url":"/advisories/advisory%3A7bb7c694-4506-4224-8a86-4d6720e15dbf","group":{"id":"advisory:7bb7c694-4506-4224-8a86-4d6720e15dbf","revision":1,"primary_event_id":12130,"change":"published","superseded_by":[],"changed":{"id":12130,"cve_ids":["CVE-2026-58704"],"payload":{"kind":"advisory","title":"CVE-2026-58704","summary":"In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58704","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58704","aliases":["CVE-2026-58704"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T18:14:21.429Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58704","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T03:55:54.211554Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2026-09-16","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704"}}}],"references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704","tags":["government-resource"]}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-693","description":"CWE-693 Protection Mechanism Failure"},{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T18:14:21.429Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-09-15T18:34:37.966Z"}}},"related_cves":[{"value":"CVE-2026-58704","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7bb7c694-4506-4224-8a86-4d6720e15dbf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[{"cve":"CVE-2026-58704","metrics":[],"products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","relationship":"advisory","known_exploited":true,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58704","advisory_id":"7bb7c694-4506-4224-8a86-4d6720e15dbf","event_types":["advisory"],"published_at":"2026-10-25T00:02:31.279399+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T18:34:37.966+00:00","detail_url":"/events/12130"},"members":[{"id":12130,"cve_ids":["CVE-2026-58704"],"payload":{"kind":"advisory","title":"CVE-2026-58704","summary":"In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58704","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58704","aliases":["CVE-2026-58704"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T18:14:21.429Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58704","role":"CISA Coordinator","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T03:55:54.211554Z"}}},{"other":{"type":"kev","content":{"dateAdded":"2026-09-16","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704"}}}],"references":[{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704","tags":["government-resource"]}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-693","description":"CWE-693 Protection Mechanism Failure"},{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T18:14:21.429Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-09-15T18:34:37.966Z"}}},"related_cves":[{"value":"CVE-2026-58704","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7bb7c694-4506-4224-8a86-4d6720e15dbf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[{"cve":"CVE-2026-58704","metrics":[],"products":[{"name":{"value":"Pixel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704","relationship":"advisory","known_exploited":true,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58704","advisory_id":"7bb7c694-4506-4224-8a86-4d6720e15dbf","event_types":["advisory"],"published_at":"2026-10-25T00:02:31.279399+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-15T18:34:37.966+00:00","detail_url":"/events/12130"}]}},{"id":11799,"cve_ids":["CVE-2026-56952"],"payload":{"kind":"advisory","title":"CVE-2026-56952","summary":"In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56952","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56952","aliases":["CVE-2026-56952"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:29.228Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56952","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:29.228Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:57.627Z"}}},"related_cves":[{"value":"CVE-2026-56952","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2de25f50-e8a2-4976-aad0-d2bd7145b754","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56952","advisory_id":"2de25f50-e8a2-4976-aad0-d2bd7145b754","event_types":["advisory"],"published_at":"2026-10-24T23:56:28.56744+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:57.627+00:00","detail_url":"/advisories/advisory%3A2de25f50-e8a2-4976-aad0-d2bd7145b754","group":{"id":"advisory:2de25f50-e8a2-4976-aad0-d2bd7145b754","revision":1,"primary_event_id":11747,"change":"published","superseded_by":[],"changed":{"id":11747,"cve_ids":["CVE-2026-56952"],"payload":{"kind":"advisory","title":"CVE-2026-56952","summary":"In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56952","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56952","aliases":["CVE-2026-56952"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:29.228Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56952","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:29.228Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:57.627Z"}}},"related_cves":[{"value":"CVE-2026-56952","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2de25f50-e8a2-4976-aad0-d2bd7145b754","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56952","advisory_id":"2de25f50-e8a2-4976-aad0-d2bd7145b754","event_types":["advisory"],"published_at":"2026-10-24T23:56:28.56744+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:57.627+00:00","detail_url":"/events/11747"},"members":[{"id":11747,"cve_ids":["CVE-2026-56952"],"payload":{"kind":"advisory","title":"CVE-2026-56952","summary":"In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56952","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56952","aliases":["CVE-2026-56952"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:29.228Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56952","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:29.228Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:57.627Z"}}},"related_cves":[{"value":"CVE-2026-56952","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2de25f50-e8a2-4976-aad0-d2bd7145b754","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56952","advisory_id":"2de25f50-e8a2-4976-aad0-d2bd7145b754","event_types":["advisory"],"published_at":"2026-10-24T23:56:28.56744+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:57.627+00:00","detail_url":"/events/11747"}]}},{"id":11798,"cve_ids":["CVE-2026-56906"],"payload":{"kind":"advisory","title":"CVE-2026-56906","summary":"In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56906","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56906","aliases":["CVE-2026-56906"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:28.551Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56906","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:28.551Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:55.694Z"}}},"related_cves":[{"value":"CVE-2026-56906","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56906","advisory_id":"136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","event_types":["advisory"],"published_at":"2026-10-24T23:56:27.967836+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:55.694+00:00","detail_url":"/advisories/advisory%3A136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","group":{"id":"advisory:136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","revision":1,"primary_event_id":11746,"change":"published","superseded_by":[],"changed":{"id":11746,"cve_ids":["CVE-2026-56906"],"payload":{"kind":"advisory","title":"CVE-2026-56906","summary":"In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56906","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56906","aliases":["CVE-2026-56906"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:28.551Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56906","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:28.551Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:55.694Z"}}},"related_cves":[{"value":"CVE-2026-56906","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56906","advisory_id":"136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","event_types":["advisory"],"published_at":"2026-10-24T23:56:27.967836+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:55.694+00:00","detail_url":"/events/11746"},"members":[{"id":11746,"cve_ids":["CVE-2026-56906"],"payload":{"kind":"advisory","title":"CVE-2026-56906","summary":"In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56906","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56906","aliases":["CVE-2026-56906"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:28.551Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56906","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:28.551Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:55.694Z"}}},"related_cves":[{"value":"CVE-2026-56906","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56906","advisory_id":"136cbd35-27ae-4b5d-a11d-2835ac3c1ec1","event_types":["advisory"],"published_at":"2026-10-24T23:56:27.967836+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:55.694+00:00","detail_url":"/events/11746"}]}},{"id":11797,"cve_ids":["CVE-2026-55330"],"payload":{"kind":"advisory","title":"CVE-2026-55330","summary":"In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55330","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55330","aliases":["CVE-2026-55330"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:27.843Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55330","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:27.843Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:54.707Z"}}},"related_cves":[{"value":"CVE-2026-55330","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2805f6f0-6588-4b95-9f32-3a819e404bac","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55330","advisory_id":"2805f6f0-6588-4b95-9f32-3a819e404bac","event_types":["advisory"],"published_at":"2026-10-24T23:56:27.133734+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:54.707+00:00","detail_url":"/advisories/advisory%3A2805f6f0-6588-4b95-9f32-3a819e404bac","group":{"id":"advisory:2805f6f0-6588-4b95-9f32-3a819e404bac","revision":1,"primary_event_id":11745,"change":"published","superseded_by":[],"changed":{"id":11745,"cve_ids":["CVE-2026-55330"],"payload":{"kind":"advisory","title":"CVE-2026-55330","summary":"In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55330","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55330","aliases":["CVE-2026-55330"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:27.843Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55330","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:27.843Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:54.707Z"}}},"related_cves":[{"value":"CVE-2026-55330","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2805f6f0-6588-4b95-9f32-3a819e404bac","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55330","advisory_id":"2805f6f0-6588-4b95-9f32-3a819e404bac","event_types":["advisory"],"published_at":"2026-10-24T23:56:27.133734+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:54.707+00:00","detail_url":"/events/11745"},"members":[{"id":11745,"cve_ids":["CVE-2026-55330"],"payload":{"kind":"advisory","title":"CVE-2026-55330","summary":"In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55330","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55330","aliases":["CVE-2026-55330"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-07T03:55:27.843Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55330","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T03:55:27.843Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:54.707Z"}}},"related_cves":[{"value":"CVE-2026-55330","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2805f6f0-6588-4b95-9f32-3a819e404bac","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55330","advisory_id":"2805f6f0-6588-4b95-9f32-3a819e404bac","event_types":["advisory"],"published_at":"2026-10-24T23:56:27.133734+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:54.707+00:00","detail_url":"/events/11745"}]}},{"id":11709,"cve_ids":["CVE-2026-49880"],"payload":{"kind":"advisory","title":"CVE-2026-49880","summary":"In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-49880","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-49880","aliases":["CVE-2026-49880"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T21:31:04.828Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-49880","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:15.998592Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T21:31:04.828Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:47.965Z"}}},"related_cves":[{"value":"CVE-2026-49880","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:785689b3-b73f-45ab-ab89-18b2fc98857e","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-49880","advisory_id":"785689b3-b73f-45ab-ab89-18b2fc98857e","event_types":["advisory"],"published_at":"2026-10-24T23:54:52.561001+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:47.965+00:00","detail_url":"/advisories/advisory%3A785689b3-b73f-45ab-ab89-18b2fc98857e","group":{"id":"advisory:785689b3-b73f-45ab-ab89-18b2fc98857e","revision":1,"primary_event_id":11658,"change":"published","superseded_by":[],"changed":{"id":11658,"cve_ids":["CVE-2026-49880"],"payload":{"kind":"advisory","title":"CVE-2026-49880","summary":"In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-49880","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-49880","aliases":["CVE-2026-49880"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T21:31:04.828Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-49880","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:15.998592Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T21:31:04.828Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:47.965Z"}}},"related_cves":[{"value":"CVE-2026-49880","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:785689b3-b73f-45ab-ab89-18b2fc98857e","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-49880","advisory_id":"785689b3-b73f-45ab-ab89-18b2fc98857e","event_types":["advisory"],"published_at":"2026-10-24T23:54:52.561001+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:47.965+00:00","detail_url":"/events/11658"},"members":[{"id":11658,"cve_ids":["CVE-2026-49880"],"payload":{"kind":"advisory","title":"CVE-2026-49880","summary":"In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-49880","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-49880","aliases":["CVE-2026-49880"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T21:31:04.828Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-49880","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:15.998592Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T21:31:04.828Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:47.965Z"}}},"related_cves":[{"value":"CVE-2026-49880","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:785689b3-b73f-45ab-ab89-18b2fc98857e","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-49880","advisory_id":"785689b3-b73f-45ab-ab89-18b2fc98857e","event_types":["advisory"],"published_at":"2026-10-24T23:54:52.561001+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:47.965+00:00","detail_url":"/events/11658"}]}},{"id":9549,"cve_ids":["CVE-2026-55307"],"payload":{"kind":"advisory","title":"CVE-2026-55307","summary":"In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55307","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55307","aliases":["CVE-2026-55307"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:57:38.291Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55307","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T18:57:35.470935Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:57:38.291Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:53.761Z"}}},"related_cves":[{"value":"CVE-2026-55307","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3ee0c07c-c883-4af9-ae12-418ccf36066c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55307","advisory_id":"3ee0c07c-c883-4af9-ae12-418ccf36066c","event_types":["advisory"],"published_at":"2026-10-24T23:19:27.768072+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:53.761+00:00","detail_url":"/advisories/advisory%3A3ee0c07c-c883-4af9-ae12-418ccf36066c","group":{"id":"advisory:3ee0c07c-c883-4af9-ae12-418ccf36066c","revision":1,"primary_event_id":9525,"change":"published","superseded_by":[],"changed":{"id":9525,"cve_ids":["CVE-2026-55307"],"payload":{"kind":"advisory","title":"CVE-2026-55307","summary":"In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55307","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55307","aliases":["CVE-2026-55307"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:57:38.291Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55307","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T18:57:35.470935Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:57:38.291Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:53.761Z"}}},"related_cves":[{"value":"CVE-2026-55307","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3ee0c07c-c883-4af9-ae12-418ccf36066c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55307","advisory_id":"3ee0c07c-c883-4af9-ae12-418ccf36066c","event_types":["advisory"],"published_at":"2026-10-24T23:19:27.768072+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:53.761+00:00","detail_url":"/events/9525"},"members":[{"id":9525,"cve_ids":["CVE-2026-55307"],"payload":{"kind":"advisory","title":"CVE-2026-55307","summary":"In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55307","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55307","aliases":["CVE-2026-55307"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:57:38.291Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55307","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T18:57:35.470935Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:57:38.291Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:53.761Z"}}},"related_cves":[{"value":"CVE-2026-55307","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3ee0c07c-c883-4af9-ae12-418ccf36066c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55307","advisory_id":"3ee0c07c-c883-4af9-ae12-418ccf36066c","event_types":["advisory"],"published_at":"2026-10-24T23:19:27.768072+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:53.761+00:00","detail_url":"/events/9525"}]}},{"id":9548,"cve_ids":["CVE-2026-56936"],"payload":{"kind":"advisory","title":"CVE-2026-56936","summary":"In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56936","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56936","aliases":["CVE-2026-56936"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:54:46.537Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56936","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T18:54:38.594533Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:54:46.537Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:56.654Z"}}},"related_cves":[{"value":"CVE-2026-56936","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0003e24d-5b7e-4e40-a908-90a14ca2b565","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56936","advisory_id":"0003e24d-5b7e-4e40-a908-90a14ca2b565","event_types":["advisory"],"published_at":"2026-10-24T23:19:26.970471+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:56.654+00:00","detail_url":"/advisories/advisory%3A0003e24d-5b7e-4e40-a908-90a14ca2b565","group":{"id":"advisory:0003e24d-5b7e-4e40-a908-90a14ca2b565","revision":1,"primary_event_id":9524,"change":"published","superseded_by":[],"changed":{"id":9524,"cve_ids":["CVE-2026-56936"],"payload":{"kind":"advisory","title":"CVE-2026-56936","summary":"In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56936","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56936","aliases":["CVE-2026-56936"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:54:46.537Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56936","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T18:54:38.594533Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:54:46.537Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:56.654Z"}}},"related_cves":[{"value":"CVE-2026-56936","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0003e24d-5b7e-4e40-a908-90a14ca2b565","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56936","advisory_id":"0003e24d-5b7e-4e40-a908-90a14ca2b565","event_types":["advisory"],"published_at":"2026-10-24T23:19:26.970471+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:56.654+00:00","detail_url":"/events/9524"},"members":[{"id":9524,"cve_ids":["CVE-2026-56936"],"payload":{"kind":"advisory","title":"CVE-2026-56936","summary":"In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-56936","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-56936","aliases":["CVE-2026-56936"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:54:46.537Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.8,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-56936","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T18:54:38.594533Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:54:46.537Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:56.654Z"}}},"related_cves":[{"value":"CVE-2026-56936","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0003e24d-5b7e-4e40-a908-90a14ca2b565","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56936","advisory_id":"0003e24d-5b7e-4e40-a908-90a14ca2b565","event_types":["advisory"],"published_at":"2026-10-24T23:19:26.970471+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:56.654+00:00","detail_url":"/events/9524"}]}},{"id":9547,"cve_ids":["CVE-2026-0198"],"payload":{"kind":"advisory","title":"CVE-2026-0198","summary":"In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-0198","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-0198","aliases":["CVE-2026-0198"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:58:13.721Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-0198","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T18:58:11.052928Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:58:13.721Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:52.791Z"}}},"related_cves":[{"value":"CVE-2026-0198","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-0198","advisory_id":"c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","event_types":["advisory"],"published_at":"2026-10-24T23:19:26.379452+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:52.791+00:00","detail_url":"/advisories/advisory%3Ac0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","group":{"id":"advisory:c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","revision":1,"primary_event_id":9523,"change":"published","superseded_by":[],"changed":{"id":9523,"cve_ids":["CVE-2026-0198"],"payload":{"kind":"advisory","title":"CVE-2026-0198","summary":"In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-0198","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-0198","aliases":["CVE-2026-0198"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:58:13.721Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-0198","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T18:58:11.052928Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:58:13.721Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:52.791Z"}}},"related_cves":[{"value":"CVE-2026-0198","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-0198","advisory_id":"c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","event_types":["advisory"],"published_at":"2026-10-24T23:19:26.379452+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:52.791+00:00","detail_url":"/events/9523"},"members":[{"id":9523,"cve_ids":["CVE-2026-0198"],"payload":{"kind":"advisory","title":"CVE-2026-0198","summary":"In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-0198","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-0198","aliases":["CVE-2026-0198"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"Android kernel"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T18:58:13.721Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-0198","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T18:58:11.052928Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T18:58:13.721Z"}}],"cna":{"orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices","dateUpdated":"2026-10-06T18:20:52.791Z"}}},"related_cves":[{"value":"CVE-2026-0198","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-0198","advisory_id":"c0bdcd9e-edcf-4c3a-b18e-29fff1c7508f","event_types":["advisory"],"published_at":"2026-10-24T23:19:26.379452+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T18:20:52.791+00:00","detail_url":"/events/9523"}]}},{"id":9268,"cve_ids":["CVE-2026-28648"],"payload":{"kind":"advisory","title":"CVE-2026-28648","summary":"In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28648","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28648","aliases":["CVE-2026-28648"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:05:40.016Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28648","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:07.028227Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-441","description":"CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:05:40.016Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:22.949Z"}}},"related_cves":[{"value":"CVE-2026-28648","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:59786156-36c1-4981-b47f-b8fdfc8478a1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28648","advisory_id":"59786156-36c1-4981-b47f-b8fdfc8478a1","event_types":["advisory"],"published_at":"2026-10-24T23:14:07.012603+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:22.949+00:00","detail_url":"/advisories/advisory%3A59786156-36c1-4981-b47f-b8fdfc8478a1","group":{"id":"advisory:59786156-36c1-4981-b47f-b8fdfc8478a1","revision":1,"primary_event_id":9248,"change":"published","superseded_by":[],"changed":{"id":9248,"cve_ids":["CVE-2026-28648"],"payload":{"kind":"advisory","title":"CVE-2026-28648","summary":"In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28648","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28648","aliases":["CVE-2026-28648"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:05:40.016Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28648","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:07.028227Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-441","description":"CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:05:40.016Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:22.949Z"}}},"related_cves":[{"value":"CVE-2026-28648","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:59786156-36c1-4981-b47f-b8fdfc8478a1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28648","advisory_id":"59786156-36c1-4981-b47f-b8fdfc8478a1","event_types":["advisory"],"published_at":"2026-10-24T23:14:07.012603+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:22.949+00:00","detail_url":"/events/9248"},"members":[{"id":9248,"cve_ids":["CVE-2026-28648"],"payload":{"kind":"advisory","title":"CVE-2026-28648","summary":"In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28648","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28648","aliases":["CVE-2026-28648"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:05:40.016Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28648","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:07.028227Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-441","description":"CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:05:40.016Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:22.949Z"}}},"related_cves":[{"value":"CVE-2026-28648","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:59786156-36c1-4981-b47f-b8fdfc8478a1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28648","advisory_id":"59786156-36c1-4981-b47f-b8fdfc8478a1","event_types":["advisory"],"published_at":"2026-10-24T23:14:07.012603+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:22.949+00:00","detail_url":"/events/9248"}]}},{"id":9267,"cve_ids":["CVE-2026-28641"],"payload":{"kind":"advisory","title":"CVE-2026-28641","summary":"In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28641","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28641","aliases":["CVE-2026-28641"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:06:44.167Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28641","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:09.131309Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:06:44.167Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:20.912Z"}}},"related_cves":[{"value":"CVE-2026-28641","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28641","advisory_id":"bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","event_types":["advisory"],"published_at":"2026-10-24T23:14:06.41339+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:20.912+00:00","detail_url":"/advisories/advisory%3Abcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","group":{"id":"advisory:bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","revision":1,"primary_event_id":9247,"change":"published","superseded_by":[],"changed":{"id":9247,"cve_ids":["CVE-2026-28641"],"payload":{"kind":"advisory","title":"CVE-2026-28641","summary":"In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28641","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28641","aliases":["CVE-2026-28641"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:06:44.167Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28641","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:09.131309Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:06:44.167Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:20.912Z"}}},"related_cves":[{"value":"CVE-2026-28641","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28641","advisory_id":"bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","event_types":["advisory"],"published_at":"2026-10-24T23:14:06.41339+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:20.912+00:00","detail_url":"/events/9247"},"members":[{"id":9247,"cve_ids":["CVE-2026-28641"],"payload":{"kind":"advisory","title":"CVE-2026-28641","summary":"In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28641","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28641","aliases":["CVE-2026-28641"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:06:44.167Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28641","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:09.131309Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:06:44.167Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:20.912Z"}}},"related_cves":[{"value":"CVE-2026-28641","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28641","advisory_id":"bcaf6a3c-ea4b-4211-8ff0-960fe4ab2db2","event_types":["advisory"],"published_at":"2026-10-24T23:14:06.41339+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:20.912+00:00","detail_url":"/events/9247"}]}},{"id":9266,"cve_ids":["CVE-2026-28647"],"payload":{"kind":"advisory","title":"CVE-2026-28647","summary":"In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28647","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28647","aliases":["CVE-2026-28647"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:06:16.719Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28647","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:06.333476Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:06:16.719Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:21.941Z"}}},"related_cves":[{"value":"CVE-2026-28647","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3f2eb50-887c-41b3-970e-1850298d181b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28647","advisory_id":"b3f2eb50-887c-41b3-970e-1850298d181b","event_types":["advisory"],"published_at":"2026-10-24T23:14:05.850335+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:21.941+00:00","detail_url":"/advisories/advisory%3Ab3f2eb50-887c-41b3-970e-1850298d181b","group":{"id":"advisory:b3f2eb50-887c-41b3-970e-1850298d181b","revision":1,"primary_event_id":9246,"change":"published","superseded_by":[],"changed":{"id":9246,"cve_ids":["CVE-2026-28647"],"payload":{"kind":"advisory","title":"CVE-2026-28647","summary":"In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28647","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28647","aliases":["CVE-2026-28647"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:06:16.719Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28647","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:06.333476Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:06:16.719Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:21.941Z"}}},"related_cves":[{"value":"CVE-2026-28647","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3f2eb50-887c-41b3-970e-1850298d181b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28647","advisory_id":"b3f2eb50-887c-41b3-970e-1850298d181b","event_types":["advisory"],"published_at":"2026-10-24T23:14:05.850335+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:21.941+00:00","detail_url":"/events/9246"},"members":[{"id":9246,"cve_ids":["CVE-2026-28647"],"payload":{"kind":"advisory","title":"CVE-2026-28647","summary":"In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28647","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28647","aliases":["CVE-2026-28647"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:06:16.719Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28647","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:06.333476Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:06:16.719Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:21.941Z"}}},"related_cves":[{"value":"CVE-2026-28647","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3f2eb50-887c-41b3-970e-1850298d181b","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28647","advisory_id":"b3f2eb50-887c-41b3-970e-1850298d181b","event_types":["advisory"],"published_at":"2026-10-24T23:14:05.850335+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:21.941+00:00","detail_url":"/events/9246"}]}},{"id":9265,"cve_ids":["CVE-2026-28640"],"payload":{"kind":"advisory","title":"CVE-2026-28640","summary":"In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28640","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28640","aliases":["CVE-2026-28640"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:07:19.770Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28640","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:08.435704Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:07:19.770Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:19.906Z"}}},"related_cves":[{"value":"CVE-2026-28640","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c078007a-e3f8-4903-9b53-e0ffcd80e13e","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28640","advisory_id":"c078007a-e3f8-4903-9b53-e0ffcd80e13e","event_types":["advisory"],"published_at":"2026-10-24T23:14:05.283396+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:19.906+00:00","detail_url":"/advisories/advisory%3Ac078007a-e3f8-4903-9b53-e0ffcd80e13e","group":{"id":"advisory:c078007a-e3f8-4903-9b53-e0ffcd80e13e","revision":1,"primary_event_id":9245,"change":"published","superseded_by":[],"changed":{"id":9245,"cve_ids":["CVE-2026-28640"],"payload":{"kind":"advisory","title":"CVE-2026-28640","summary":"In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28640","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28640","aliases":["CVE-2026-28640"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:07:19.770Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28640","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:08.435704Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:07:19.770Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:19.906Z"}}},"related_cves":[{"value":"CVE-2026-28640","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c078007a-e3f8-4903-9b53-e0ffcd80e13e","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28640","advisory_id":"c078007a-e3f8-4903-9b53-e0ffcd80e13e","event_types":["advisory"],"published_at":"2026-10-24T23:14:05.283396+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:19.906+00:00","detail_url":"/events/9245"},"members":[{"id":9245,"cve_ids":["CVE-2026-28640"],"payload":{"kind":"advisory","title":"CVE-2026-28640","summary":"In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28640","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28640","aliases":["CVE-2026-28640"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:07:19.770Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28640","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:08.435704Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:07:19.770Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:19.906Z"}}},"related_cves":[{"value":"CVE-2026-28640","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c078007a-e3f8-4903-9b53-e0ffcd80e13e","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28640","advisory_id":"c078007a-e3f8-4903-9b53-e0ffcd80e13e","event_types":["advisory"],"published_at":"2026-10-24T23:14:05.283396+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:19.906+00:00","detail_url":"/events/9245"}]}},{"id":9264,"cve_ids":["CVE-2026-28625"],"payload":{"kind":"advisory","title":"CVE-2026-28625","summary":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28625","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28625","aliases":["CVE-2026-28625"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:07:47.688Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28625","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:10.606566Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:07:47.688Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:18.865Z"}}},"related_cves":[{"value":"CVE-2026-28625","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:86749ae4-1935-412f-a958-3afc3e38b9ce","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28625","advisory_id":"86749ae4-1935-412f-a958-3afc3e38b9ce","event_types":["advisory"],"published_at":"2026-10-24T23:14:04.721262+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:18.865+00:00","detail_url":"/advisories/advisory%3A86749ae4-1935-412f-a958-3afc3e38b9ce","group":{"id":"advisory:86749ae4-1935-412f-a958-3afc3e38b9ce","revision":1,"primary_event_id":9244,"change":"published","superseded_by":[],"changed":{"id":9244,"cve_ids":["CVE-2026-28625"],"payload":{"kind":"advisory","title":"CVE-2026-28625","summary":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28625","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28625","aliases":["CVE-2026-28625"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:07:47.688Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28625","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:10.606566Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:07:47.688Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:18.865Z"}}},"related_cves":[{"value":"CVE-2026-28625","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:86749ae4-1935-412f-a958-3afc3e38b9ce","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28625","advisory_id":"86749ae4-1935-412f-a958-3afc3e38b9ce","event_types":["advisory"],"published_at":"2026-10-24T23:14:04.721262+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:18.865+00:00","detail_url":"/events/9244"},"members":[{"id":9244,"cve_ids":["CVE-2026-28625"],"payload":{"kind":"advisory","title":"CVE-2026-28625","summary":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-28625","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28625","aliases":["CVE-2026-28625"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T13:07:47.688Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/aaos/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28625","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-06T03:56:10.606566Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T13:07:47.688Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:39:18.865Z"}}},"related_cves":[{"value":"CVE-2026-28625","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:86749ae4-1935-412f-a958-3afc3e38b9ce","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28625","advisory_id":"86749ae4-1935-412f-a958-3afc3e38b9ce","event_types":["advisory"],"published_at":"2026-10-24T23:14:04.721262+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:39:18.865+00:00","detail_url":"/events/9244"}]}},{"id":9053,"cve_ids":["CVE-2026-58880"],"payload":{"kind":"advisory","title":"CVE-2026-58880","summary":"In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58880","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58880","aliases":["CVE-2026-58880"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:05.218Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58880","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:05.218Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:06.623Z"}}},"related_cves":[{"value":"CVE-2026-58880","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:402aa248-4aa8-4d97-8062-53ab45c1e293","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58880","advisory_id":"402aa248-4aa8-4d97-8062-53ab45c1e293","event_types":["advisory"],"published_at":"2026-10-24T23:10:46.399996+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:06.623+00:00","detail_url":"/advisories/advisory%3A402aa248-4aa8-4d97-8062-53ab45c1e293","group":{"id":"advisory:402aa248-4aa8-4d97-8062-53ab45c1e293","revision":1,"primary_event_id":9036,"change":"published","superseded_by":[],"changed":{"id":9036,"cve_ids":["CVE-2026-58880"],"payload":{"kind":"advisory","title":"CVE-2026-58880","summary":"In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58880","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58880","aliases":["CVE-2026-58880"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:05.218Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58880","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:05.218Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:06.623Z"}}},"related_cves":[{"value":"CVE-2026-58880","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:402aa248-4aa8-4d97-8062-53ab45c1e293","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58880","advisory_id":"402aa248-4aa8-4d97-8062-53ab45c1e293","event_types":["advisory"],"published_at":"2026-10-24T23:10:46.399996+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:06.623+00:00","detail_url":"/events/9036"},"members":[{"id":9036,"cve_ids":["CVE-2026-58880"],"payload":{"kind":"advisory","title":"CVE-2026-58880","summary":"In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58880","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58880","aliases":["CVE-2026-58880"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:05.218Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58880","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:05.218Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:06.623Z"}}},"related_cves":[{"value":"CVE-2026-58880","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:402aa248-4aa8-4d97-8062-53ab45c1e293","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58880","advisory_id":"402aa248-4aa8-4d97-8062-53ab45c1e293","event_types":["advisory"],"published_at":"2026-10-24T23:10:46.399996+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:06.623+00:00","detail_url":"/events/9036"}]}},{"id":9052,"cve_ids":["CVE-2026-58859"],"payload":{"kind":"advisory","title":"CVE-2026-58859","summary":"In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58859","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58859","aliases":["CVE-2026-58859"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:11.614Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58859","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-248","description":"CWE-248 Uncaught Exception"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:11.614Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:04.540Z"}}},"related_cves":[{"value":"CVE-2026-58859","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5b834865-4deb-4910-8601-5d4fbf2bcdf1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58859","advisory_id":"5b834865-4deb-4910-8601-5d4fbf2bcdf1","event_types":["advisory"],"published_at":"2026-10-24T23:10:45.838706+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:04.54+00:00","detail_url":"/advisories/advisory%3A5b834865-4deb-4910-8601-5d4fbf2bcdf1","group":{"id":"advisory:5b834865-4deb-4910-8601-5d4fbf2bcdf1","revision":1,"primary_event_id":9035,"change":"published","superseded_by":[],"changed":{"id":9035,"cve_ids":["CVE-2026-58859"],"payload":{"kind":"advisory","title":"CVE-2026-58859","summary":"In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58859","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58859","aliases":["CVE-2026-58859"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:11.614Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58859","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-248","description":"CWE-248 Uncaught Exception"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:11.614Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:04.540Z"}}},"related_cves":[{"value":"CVE-2026-58859","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5b834865-4deb-4910-8601-5d4fbf2bcdf1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58859","advisory_id":"5b834865-4deb-4910-8601-5d4fbf2bcdf1","event_types":["advisory"],"published_at":"2026-10-24T23:10:45.838706+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:04.54+00:00","detail_url":"/events/9035"},"members":[{"id":9035,"cve_ids":["CVE-2026-58859"],"payload":{"kind":"advisory","title":"CVE-2026-58859","summary":"In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58859","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58859","aliases":["CVE-2026-58859"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:11.614Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58859","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-248","description":"CWE-248 Uncaught Exception"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:11.614Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:04.540Z"}}},"related_cves":[{"value":"CVE-2026-58859","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5b834865-4deb-4910-8601-5d4fbf2bcdf1","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58859","advisory_id":"5b834865-4deb-4910-8601-5d4fbf2bcdf1","event_types":["advisory"],"published_at":"2026-10-24T23:10:45.838706+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:04.54+00:00","detail_url":"/events/9035"}]}},{"id":9050,"cve_ids":["CVE-2026-58854"],"payload":{"kind":"advisory","title":"CVE-2026-58854","summary":"In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58854","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58854","aliases":["CVE-2026-58854"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:00.735Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58854","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:00.735Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:02.477Z"}}},"related_cves":[{"value":"CVE-2026-58854","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58854","advisory_id":"bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","event_types":["advisory"],"published_at":"2026-10-24T23:10:44.663501+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:02.477+00:00","detail_url":"/advisories/advisory%3Abfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","group":{"id":"advisory:bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","revision":1,"primary_event_id":9033,"change":"published","superseded_by":[],"changed":{"id":9033,"cve_ids":["CVE-2026-58854"],"payload":{"kind":"advisory","title":"CVE-2026-58854","summary":"In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58854","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58854","aliases":["CVE-2026-58854"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:00.735Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58854","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:00.735Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:02.477Z"}}},"related_cves":[{"value":"CVE-2026-58854","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58854","advisory_id":"bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","event_types":["advisory"],"published_at":"2026-10-24T23:10:44.663501+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:02.477+00:00","detail_url":"/events/9033"},"members":[{"id":9033,"cve_ids":["CVE-2026-58854"],"payload":{"kind":"advisory","title":"CVE-2026-58854","summary":"In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58854","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58854","aliases":["CVE-2026-58854"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:00.735Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58854","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:00.735Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:02.477Z"}}},"related_cves":[{"value":"CVE-2026-58854","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58854","advisory_id":"bfbd5f39-a5ac-4cdc-a6f6-74fbe27f0443","event_types":["advisory"],"published_at":"2026-10-24T23:10:44.663501+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:02.477+00:00","detail_url":"/events/9033"}]}},{"id":9049,"cve_ids":["CVE-2026-58841"],"payload":{"kind":"advisory","title":"CVE-2026-58841","summary":"In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58841","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58841","aliases":["CVE-2026-58841"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:59.753Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58841","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:59.753Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:01.457Z"}}},"related_cves":[{"value":"CVE-2026-58841","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea073248-8c02-42a3-aa54-4e93e4670ba8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58841","advisory_id":"ea073248-8c02-42a3-aa54-4e93e4670ba8","event_types":["advisory"],"published_at":"2026-10-24T23:10:44.072904+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:01.457+00:00","detail_url":"/advisories/advisory%3Aea073248-8c02-42a3-aa54-4e93e4670ba8","group":{"id":"advisory:ea073248-8c02-42a3-aa54-4e93e4670ba8","revision":1,"primary_event_id":9032,"change":"published","superseded_by":[],"changed":{"id":9032,"cve_ids":["CVE-2026-58841"],"payload":{"kind":"advisory","title":"CVE-2026-58841","summary":"In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58841","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58841","aliases":["CVE-2026-58841"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:59.753Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58841","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:59.753Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:01.457Z"}}},"related_cves":[{"value":"CVE-2026-58841","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea073248-8c02-42a3-aa54-4e93e4670ba8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58841","advisory_id":"ea073248-8c02-42a3-aa54-4e93e4670ba8","event_types":["advisory"],"published_at":"2026-10-24T23:10:44.072904+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:01.457+00:00","detail_url":"/events/9032"},"members":[{"id":9032,"cve_ids":["CVE-2026-58841"],"payload":{"kind":"advisory","title":"CVE-2026-58841","summary":"In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58841","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58841","aliases":["CVE-2026-58841"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:59.753Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58841","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:59.753Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:01.457Z"}}},"related_cves":[{"value":"CVE-2026-58841","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea073248-8c02-42a3-aa54-4e93e4670ba8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58841","advisory_id":"ea073248-8c02-42a3-aa54-4e93e4670ba8","event_types":["advisory"],"published_at":"2026-10-24T23:10:44.072904+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:01.457+00:00","detail_url":"/events/9032"}]}},{"id":9048,"cve_ids":["CVE-2026-58815"],"payload":{"kind":"advisory","title":"CVE-2026-58815","summary":"In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58815","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58815","aliases":["CVE-2026-58815"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:59.053Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58815","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:59.053Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:58.338Z"}}},"related_cves":[{"value":"CVE-2026-58815","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:44d56b6c-244a-4666-b605-4d97c0e4ad26","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58815","advisory_id":"44d56b6c-244a-4666-b605-4d97c0e4ad26","event_types":["advisory"],"published_at":"2026-10-24T23:10:43.452543+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:58.338+00:00","detail_url":"/advisories/advisory%3A44d56b6c-244a-4666-b605-4d97c0e4ad26","group":{"id":"advisory:44d56b6c-244a-4666-b605-4d97c0e4ad26","revision":1,"primary_event_id":9031,"change":"published","superseded_by":[],"changed":{"id":9031,"cve_ids":["CVE-2026-58815"],"payload":{"kind":"advisory","title":"CVE-2026-58815","summary":"In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58815","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58815","aliases":["CVE-2026-58815"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:59.053Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58815","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:59.053Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:58.338Z"}}},"related_cves":[{"value":"CVE-2026-58815","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:44d56b6c-244a-4666-b605-4d97c0e4ad26","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58815","advisory_id":"44d56b6c-244a-4666-b605-4d97c0e4ad26","event_types":["advisory"],"published_at":"2026-10-24T23:10:43.452543+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:58.338+00:00","detail_url":"/events/9031"},"members":[{"id":9031,"cve_ids":["CVE-2026-58815"],"payload":{"kind":"advisory","title":"CVE-2026-58815","summary":"In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58815","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58815","aliases":["CVE-2026-58815"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:59.053Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58815","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:59.053Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:58.338Z"}}},"related_cves":[{"value":"CVE-2026-58815","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:44d56b6c-244a-4666-b605-4d97c0e4ad26","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58815","advisory_id":"44d56b6c-244a-4666-b605-4d97c0e4ad26","event_types":["advisory"],"published_at":"2026-10-24T23:10:43.452543+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:58.338+00:00","detail_url":"/events/9031"}]}},{"id":9047,"cve_ids":["CVE-2026-58835"],"payload":{"kind":"advisory","title":"CVE-2026-58835","summary":"In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58835","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58835","aliases":["CVE-2026-58835"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:04.439Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58835","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:04.439Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:00.435Z"}}},"related_cves":[{"value":"CVE-2026-58835","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b0578891-ee53-4ea0-af5b-2cae07242d86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58835","advisory_id":"b0578891-ee53-4ea0-af5b-2cae07242d86","event_types":["advisory"],"published_at":"2026-10-24T23:10:42.841194+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:00.435+00:00","detail_url":"/advisories/advisory%3Ab0578891-ee53-4ea0-af5b-2cae07242d86","group":{"id":"advisory:b0578891-ee53-4ea0-af5b-2cae07242d86","revision":1,"primary_event_id":9030,"change":"published","superseded_by":[],"changed":{"id":9030,"cve_ids":["CVE-2026-58835"],"payload":{"kind":"advisory","title":"CVE-2026-58835","summary":"In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58835","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58835","aliases":["CVE-2026-58835"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:04.439Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58835","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:04.439Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:00.435Z"}}},"related_cves":[{"value":"CVE-2026-58835","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b0578891-ee53-4ea0-af5b-2cae07242d86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58835","advisory_id":"b0578891-ee53-4ea0-af5b-2cae07242d86","event_types":["advisory"],"published_at":"2026-10-24T23:10:42.841194+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:00.435+00:00","detail_url":"/events/9030"},"members":[{"id":9030,"cve_ids":["CVE-2026-58835"],"payload":{"kind":"advisory","title":"CVE-2026-58835","summary":"In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-58835","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-58835","aliases":["CVE-2026-58835"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:04.439Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-58835","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:04.439Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:24:00.435Z"}}},"related_cves":[{"value":"CVE-2026-58835","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b0578891-ee53-4ea0-af5b-2cae07242d86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-58835","advisory_id":"b0578891-ee53-4ea0-af5b-2cae07242d86","event_types":["advisory"],"published_at":"2026-10-24T23:10:42.841194+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:24:00.435+00:00","detail_url":"/events/9030"}]}},{"id":9046,"cve_ids":["CVE-2026-55286"],"payload":{"kind":"advisory","title":"CVE-2026-55286","summary":"In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55286","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55286","aliases":["CVE-2026-55286"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:12.431Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55286","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:12.431Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:57.283Z"}}},"related_cves":[{"value":"CVE-2026-55286","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4de8bffd-1e0f-4450-b30d-574f159901d9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55286","advisory_id":"4de8bffd-1e0f-4450-b30d-574f159901d9","event_types":["advisory"],"published_at":"2026-10-24T23:10:42.266062+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:57.283+00:00","detail_url":"/advisories/advisory%3A4de8bffd-1e0f-4450-b30d-574f159901d9","group":{"id":"advisory:4de8bffd-1e0f-4450-b30d-574f159901d9","revision":1,"primary_event_id":9029,"change":"published","superseded_by":[],"changed":{"id":9029,"cve_ids":["CVE-2026-55286"],"payload":{"kind":"advisory","title":"CVE-2026-55286","summary":"In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55286","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55286","aliases":["CVE-2026-55286"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:12.431Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55286","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:12.431Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:57.283Z"}}},"related_cves":[{"value":"CVE-2026-55286","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4de8bffd-1e0f-4450-b30d-574f159901d9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55286","advisory_id":"4de8bffd-1e0f-4450-b30d-574f159901d9","event_types":["advisory"],"published_at":"2026-10-24T23:10:42.266062+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:57.283+00:00","detail_url":"/events/9029"},"members":[{"id":9029,"cve_ids":["CVE-2026-55286"],"payload":{"kind":"advisory","title":"CVE-2026-55286","summary":"In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55286","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55286","aliases":["CVE-2026-55286"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:12.431Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55286","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:12.431Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:57.283Z"}}},"related_cves":[{"value":"CVE-2026-55286","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4de8bffd-1e0f-4450-b30d-574f159901d9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55286","advisory_id":"4de8bffd-1e0f-4450-b30d-574f159901d9","event_types":["advisory"],"published_at":"2026-10-24T23:10:42.266062+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:57.283+00:00","detail_url":"/events/9029"}]}},{"id":9045,"cve_ids":["CVE-2026-55280"],"payload":{"kind":"advisory","title":"CVE-2026-55280","summary":"In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55280","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55280","aliases":["CVE-2026-55280"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:03.221Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55280","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:03.221Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:56.233Z"}}},"related_cves":[{"value":"CVE-2026-55280","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d0463777-6230-418c-b9ac-584bbac108a9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55280","advisory_id":"d0463777-6230-418c-b9ac-584bbac108a9","event_types":["advisory"],"published_at":"2026-10-24T23:10:41.507432+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:56.233+00:00","detail_url":"/advisories/advisory%3Ad0463777-6230-418c-b9ac-584bbac108a9","group":{"id":"advisory:d0463777-6230-418c-b9ac-584bbac108a9","revision":1,"primary_event_id":9028,"change":"published","superseded_by":[],"changed":{"id":9028,"cve_ids":["CVE-2026-55280"],"payload":{"kind":"advisory","title":"CVE-2026-55280","summary":"In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55280","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55280","aliases":["CVE-2026-55280"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:03.221Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55280","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:03.221Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:56.233Z"}}},"related_cves":[{"value":"CVE-2026-55280","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d0463777-6230-418c-b9ac-584bbac108a9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55280","advisory_id":"d0463777-6230-418c-b9ac-584bbac108a9","event_types":["advisory"],"published_at":"2026-10-24T23:10:41.507432+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:56.233+00:00","detail_url":"/events/9028"},"members":[{"id":9028,"cve_ids":["CVE-2026-55280"],"payload":{"kind":"advisory","title":"CVE-2026-55280","summary":"In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55280","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55280","aliases":["CVE-2026-55280"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:03.221Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55280","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:03.221Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:56.233Z"}}},"related_cves":[{"value":"CVE-2026-55280","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d0463777-6230-418c-b9ac-584bbac108a9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55280","advisory_id":"d0463777-6230-418c-b9ac-584bbac108a9","event_types":["advisory"],"published_at":"2026-10-24T23:10:41.507432+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:56.233+00:00","detail_url":"/events/9028"}]}},{"id":9044,"cve_ids":["CVE-2026-55270"],"payload":{"kind":"advisory","title":"CVE-2026-55270","summary":"In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55270","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55270","aliases":["CVE-2026-55270"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:58.346Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-441","description":"CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:58.346Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:55.211Z"}}},"related_cves":[{"value":"CVE-2026-55270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b4973707-9e02-430c-af8e-d850fc6e16e6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55270","advisory_id":"b4973707-9e02-430c-af8e-d850fc6e16e6","event_types":["advisory"],"published_at":"2026-10-24T23:10:40.699576+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:55.211+00:00","detail_url":"/advisories/advisory%3Ab4973707-9e02-430c-af8e-d850fc6e16e6","group":{"id":"advisory:b4973707-9e02-430c-af8e-d850fc6e16e6","revision":1,"primary_event_id":9027,"change":"published","superseded_by":[],"changed":{"id":9027,"cve_ids":["CVE-2026-55270"],"payload":{"kind":"advisory","title":"CVE-2026-55270","summary":"In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55270","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55270","aliases":["CVE-2026-55270"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:58.346Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-441","description":"CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:58.346Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:55.211Z"}}},"related_cves":[{"value":"CVE-2026-55270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b4973707-9e02-430c-af8e-d850fc6e16e6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55270","advisory_id":"b4973707-9e02-430c-af8e-d850fc6e16e6","event_types":["advisory"],"published_at":"2026-10-24T23:10:40.699576+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:55.211+00:00","detail_url":"/events/9027"},"members":[{"id":9027,"cve_ids":["CVE-2026-55270"],"payload":{"kind":"advisory","title":"CVE-2026-55270","summary":"In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55270","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55270","aliases":["CVE-2026-55270"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"},{"status":"affected","version":"15"},{"status":"affected","version":"14"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:55:58.346Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-441","description":"CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:55:58.346Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:55.211Z"}}},"related_cves":[{"value":"CVE-2026-55270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b4973707-9e02-430c-af8e-d850fc6e16e6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55270","advisory_id":"b4973707-9e02-430c-af8e-d850fc6e16e6","event_types":["advisory"],"published_at":"2026-10-24T23:10:40.699576+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:55.211+00:00","detail_url":"/events/9027"}]}},{"id":9043,"cve_ids":["CVE-2026-55269"],"payload":{"kind":"advisory","title":"CVE-2026-55269","summary":"In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55269","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55269","aliases":["CVE-2026-55269"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:01.873Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55269","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:01.873Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:54.200Z"}}},"related_cves":[{"value":"CVE-2026-55269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9bc449ce-57e7-456e-85d4-dc995c8672b7","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55269","advisory_id":"9bc449ce-57e7-456e-85d4-dc995c8672b7","event_types":["advisory"],"published_at":"2026-10-24T23:10:40.098882+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:54.2+00:00","detail_url":"/advisories/advisory%3A9bc449ce-57e7-456e-85d4-dc995c8672b7","group":{"id":"advisory:9bc449ce-57e7-456e-85d4-dc995c8672b7","revision":1,"primary_event_id":9026,"change":"published","superseded_by":[],"changed":{"id":9026,"cve_ids":["CVE-2026-55269"],"payload":{"kind":"advisory","title":"CVE-2026-55269","summary":"In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55269","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55269","aliases":["CVE-2026-55269"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:01.873Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55269","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:01.873Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:54.200Z"}}},"related_cves":[{"value":"CVE-2026-55269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9bc449ce-57e7-456e-85d4-dc995c8672b7","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55269","advisory_id":"9bc449ce-57e7-456e-85d4-dc995c8672b7","event_types":["advisory"],"published_at":"2026-10-24T23:10:40.098882+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:54.2+00:00","detail_url":"/events/9026"},"members":[{"id":9026,"cve_ids":["CVE-2026-55269"],"payload":{"kind":"advisory","title":"CVE-2026-55269","summary":"In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","evidence":"cve:CVE-2026-55269","products":[{"name":{"value":"Android","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-55269","aliases":["CVE-2026-55269"],"metrics":[],"affected":[{"vendor":"Google","product":"Android","versions":[{"status":"affected","version":"17"},{"status":"affected","version":"16-qpr2"},{"status":"affected","version":"16"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T03:56:01.873Z","provider":"cve","references":["https://source.android.com/docs/security/bulletin/2026/2026-10-01"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-55269","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-05T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T03:56:01.873Z"}}],"cna":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2026-10-05T18:23:54.200Z"}}},"related_cves":[{"value":"CVE-2026-55269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9bc449ce-57e7-456e-85d4-dc995c8672b7","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-55269","advisory_id":"9bc449ce-57e7-456e-85d4-dc995c8672b7","event_types":["advisory"],"published_at":"2026-10-24T23:10:40.098882+00:00","technologies":["android","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T18:23:54.2+00:00","detail_url":"/events/9026"}]}}],"next_after":22214,"next_before":9043}