SecBoard
Zurück zur CVE-Übersicht

CVE-2026-55270

HIGH(7.8)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk Signal Score20/100 — NIEDRIG
  • CVSS 7.8 — Hoch

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.1%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

7.8

Technische Schwere

Beschreibung

In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Betroffene Produkte

  • cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:qpr2_beta_1:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:qpr2_beta_2:*:*:*:*:*:*
  • cpe:2.3:o:google:android:16.0:qpr2_beta_3:*:*:*:*:*:*
  • cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*

Referenzen