CVE-2026-58821

MediumCVSS 6.2/10Last modified Nov 9, 2026

Description

In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
GoogleAndroid17; 16-qpr2; 16

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 9, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-588229.8In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code executiCVE-2026-588237.8In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to locaCVE-2026-588248.4In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalaCVE-2026-588258.4In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation ofCVE-2026-588268.4In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wCVE-2026-588278.4In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of priviCVE-2026-588288.4In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilegCVE-2026-588298.4In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of priCVE-2026-58838.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a cCVE-2026-588345.5In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validaCVE-2026-588358.8In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code executCVE-2026-588367.8In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that all
CVE-2026-58821: Medium severity, CVSS 6.2 | Vulnix