New vulnerabilities – clearly explained

Google Chrome

Research and translation in progress – available shortly.

Google Chrome: Incorrect authorization in SiteIsolation

Google Chrome versions before 155.0.8059.39 contain an incorrect authorization flaw in SiteIsolation, Chrome's per-site process isolation feature. A remote attacker can use a crafted HTML page to execute arbitrary code in the browser. The CVSS vector requires user interaction, such as the user visiting the page. Chromium rates the issue High, and the CNA CVSS score is 9.6 (Critical).

Google · Chrome

Google Android

Research and translation in progress – available shortly.

Google Android

Research and translation in progress – available shortly.

Google Android Telephonycore: Denial of Service due to uncaught exception

A flaw in the Android Telephonycore component (cellular telephony stack, delivered as a Project Mainline module) allows a denial of service caused by an uncaught exception. The CVE record also describes a possible local escalation of privilege, while the bulletin lists the entry as DoS. An attacker needs local access with low privileges, such as a malicious or compromised app already on the device, and no user interaction is required.

Google · Android

Google Android

Research and translation in progress – available shortly.

Google Android: Memory corruption in Framework allows local privilege escalation

Google Android 14 to 17 contains a memory corruption flaw caused by type confusion in the Framework component (CVE-2026-58854). An attacker with low privileges on the device, for example through a malicious or compromised app, can escalate privileges locally without user interaction. The CVSS 3.1 base score is 7.8 (High). Remote exploitation over the network is not described.

Google · Android

Google Android: Permission bypass leading to local privilege escalation

A logic error in the Android Framework allows a permission check to be bypassed. A local attacker with a foothold on the device, for example through a malicious or compromised app with low privileges, can escalate privileges. No user interaction is required. The flaw is not internet-facing, but it matters most for unpatched phones and tablets that hold business data or accounts.

Google · Android

Google Android: Out-of-bounds write in Bluetooth storage (cfg2prop)

A heap buffer overflow in the cfg2prop function of the Android Bluetooth storage code (btif_storage.cc) allows an out-of-bounds write. The CVE record states that this could lead to remote code execution without additional execution privileges and without user interaction. Google's October 2026 bulletin classifies the issue as a critical elevation of privilege in the System component, so the exact impact should be verified against the bulletin and the NVD record.

Google · Android

Google Android

Research and translation in progress – available shortly.

Android: Out-of-bounds write enables local privilege escalation

Google Android contains an out-of-bounds write caused by an incorrect bounds check in multiple locations. A local attacker with low privileges and no user interaction can escalate privileges on the affected device. The bulletin lists the issue under Framework, while its introduction describes a System component issue. Google has not flagged it as exploited.

Google · Android

Google Android: Out-of-bounds write in NFC stack allows local privilege escalation

An out-of-bounds write in the stpropnci_process function of the ST NFC hardware abstraction layer is caused by an incorrect bounds check. A local attacker with low privileges and no user interaction can use it to escalate privileges on an affected Android device. Exploitation requires a foothold on the device first, such as a malicious app or a compromised process, so the issue is not directly reachable from the internet.

Google · Android

Google Android: Out-of-bounds write due to uninitialized data

An out-of-bounds write caused by uninitialized data exists in multiple locations of Android's System component. According to the CVE record and CVSS (8.8), an attacker with low privileges could escalate privileges remotely without user interaction, which could lead to a complete compromise of confidentiality, integrity and availability. The Android Security Bulletin describes the issue as a local escalation of privilege, which conflicts with the CVE record; until Google clarifies, the network scenario should be assumed.

Google · Android

Google Android: Local privilege escalation via permission bypass

Google Android contains a permission bypass caused by a confused deputy in dialInternal in multiple locations. A local app or process with low privileges can use it to escalate privileges on the device. No user interaction is required. Google rates the issue High in the Framework section of the October 2026 bulletin, and the CVSS base score is 7.8.

Google · Android

Google Android: Local privilege escalation in System packet filter

A memory safety flaw caused by improper input validation (CWE-20) exists in the function FilterCapturedPacket of snoop_logger.cc in the Android System component. A local attacker with low privileges, for example through a malicious app or a compromised user session, could escalate privileges on the device without user interaction. Google rates the issue as Critical in its bulletin, while the CVSS 3.1 base score is 7.8 (High).

Google · Android

Google Android libufdt: Out-of-bounds write due to resource exhaustion

A flaw in the qsort routine of the libufdt library (libufdt_sysdeps_vendor.c) allows an out-of-bounds write caused by resource exhaustion. The Android Security Bulletin for October 2026 classifies the issue as a High-severity Denial-of-Service vulnerability, while the CVE description refers to local escalation of privilege. Exploitation requires local access with low privileges and no user interaction.

Google · Android

Google Android

Research and translation in progress – available shortly.

Google Android: Local privilege escalation via out-of-bounds read

A flaw in several functions of MessageQueueBase.h, caused by an incorrect bounds check, allows an out-of-bounds read on Android devices. A local attacker with low privileges, such as a malicious or compromised app, could escalate privileges on the device. No user interaction is required once the attacker has a foothold on the device. The device is not directly exposed to the internet, but the risk applies to company and BYOD phones and tablets.

Google · Android

Google Android: Local privilege escalation in Bluetooth stack

A flaw in the msft.cc handler of the Android Bluetooth stack can dereference an uninitialized pointer in the privileged Bluetooth process. A local attacker with low privileges and no user interaction could potentially hijack control flow and escalate privileges on the device. The bulletin lists the issue as a Critical DoS, which conflicts with the CVE description, so the type should be verified.

Google · Android

Google Android: Out-of-bounds write in NFC stack allows local privilege escalation

A High-severity flaw in the function rw_t4t_update_file in rw_t4t.cc of Android allows an out-of-bounds write caused by an integer overflow. A local attacker with low privileges, typically through a malicious or compromised app, could escalate privileges on the device without user interaction. No exploitation has been reported.

Google · Android

Google Android: Out-of-bounds write in NFC stack allows local privilege escalation

An out-of-bounds write caused by a missing bounds check in multiple functions of nfa_nfcee_act.cc in the Android NFC stack. A local attacker with an existing foothold on the device, such as a malicious app, could escalate privileges without additional execution privileges and without user interaction. The vendor rates the issue High in its October 2026 bulletin, and the CVSS base score in the input is 7.8.

Google · Android

Google Android

Research and translation in progress – available shortly.

Android: Missing permission check in WiFi component allows privilege escalation

A missing permission check in the WiFi component of Android (System component, file WifiPermissionsUtil.java) allows a possible sandbox escape. A local attacker with a low-privilege foothold, such as a malicious or compromised app, could escalate privileges on the device. No additional execution privileges and no user interaction are required. The CVSS 3.1 base score is 8.8 (High).

Google · Android

Google Android

Research and translation in progress – available shortly.

Google Android: Permission bypass (confused deputy) in Settings

A confused deputy flaw in the Android Settings component allows a permission bypass. A local attacker or malicious app can use it to escalate privileges on the device without additional execution privileges and without user interaction. The CVSS vector rates confidentiality, integrity and availability impact as High.

Google · Android