CVE-2026-0169

HighCVSS 8.4/10Last modified Nov 13, 2026

Description

In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-489

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Google	Android	Android kernel

References

https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Timeline

Published: Nov 10, 2026
Last modified: Nov 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-01708.8In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote CVE-2026-01718.8In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution wi CVE-2026-01758.4In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error. This cou CVE-2026-01774.4In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local inf CVE-2026-01786.7In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries due CVE-2026-01796.7In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege wit CVE-2026-01834.4In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System exe CVE-2026-01866.7In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escal CVE-2026-01876.7In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead CVE-2026-01898.4In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of CVE-2026-01917.8In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation CVE-2026-01926.7In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privile