CVE-2026-55359

HighCVSS 7.8/10Last modified Sep 21, 2026

Description

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-693

Affected software

VendorProductVersions
GoogleAndroidAndroid kernel

References

Timeline

Published
Sep 15, 2026
Last modified
Sep 21, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-55367.3A weakness has been identified in FedML-AI FedML up to 0.8.9. Affected is the function sendMessage of the file grpc_server.py of the componeCVE-2026-553608.4In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel encryption due to a CVE-2026-553629.8In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no aCVE-2026-553656.7In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalatCVE-2026-553669.8In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalationCVE-2026-553677.5h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client couldCVE-2026-553688.1h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-lCVE-2026-553696.5Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the CVE-2026-55376.3A security vulnerability has been detected in halex CourseSEL up to 1.1.0. Affected by this vulnerability is the function check_sel of the fCVE-2026-553706.4Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's existing TOTP verification accepted a suCVE-2026-553716.9OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picturCVE-2026-553736.2OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions pri