CVE-2026-58824

HighCVSS 8.4/10Last modified Nov 9, 2026

Description

In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Google	Android	Android kernel

References

Timeline

Published: Nov 2, 2026
Last modified: Nov 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-588258.4In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of CVE-2026-588268.4In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege w CVE-2026-588278.4In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi CVE-2026-588288.4In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privileg CVE-2026-588298.4In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of pri CVE-2026-58838.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a c CVE-2026-588345.5In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input valida CVE-2026-588358.8In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execut CVE-2026-588367.8In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that all CVE-2026-588378.4In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation CVE-2026-588384.0In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local CVE-2026-588397.8In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of