CVE-2026-58704

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Oct 7, 2026

Description

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285 CWE-693

Affected software

Vendor	Product	Versions
Google	Android	Android kernel

References

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704US Government Resource

Timeline

Published: Sep 15, 2026
Last modified: Oct 7, 2026
Added to CISA KEV: Sep 16, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-587059.8In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could CVE-2026-58718.8Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf CVE-2026-587108.8In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to rem CVE-2026-587166.7In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of priv CVE-2026-587186.7In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to CVE-2026-58728.8Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a c CVE-2026-587214.4In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disc CVE-2026-58722In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error in CVE-2026-587247.0In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with Sys CVE-2026-587266.7In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of p CVE-2026-587287.0In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with CVE-2026-587296.7In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege w