CVE-2026-58817

MediumCVSS 6.2/10Last modified Nov 10, 2026

Description

In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
GoogleAndroid17; 16-qpr2; 16; 15; 14

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 10, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-58824.3Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HCVE-2026-588207.8In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege witCVE-2026-588216.2In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lCVE-2026-588229.8In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code executiCVE-2026-588237.8In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to locaCVE-2026-588248.4In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalaCVE-2026-588258.4In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation ofCVE-2026-588268.4In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wCVE-2026-588278.4In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of priviCVE-2026-588288.4In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilegCVE-2026-588298.4In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of priCVE-2026-58838.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a c
CVE-2026-58817: Medium severity, CVSS 6.2 | Vulnix