CVE-2026-59599

Google Android Publicada: 2026-11-10 22:22 (ayer)

Descripción

Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in the kernel, aka A-519434175.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
Google	Android	Android kernel

Referencias y parches

https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Puntuación CVSS

Aún sin puntuación. Aparecerá cuando la CNA, CISA o NVD la puntúen.

Cronología

ID reservado2026-07-06
Publicada2026-11-10 22:22
Llegó a IP-DB2026-11-10 23:03
Última actualización2026-11-11 00:46

Asignada por (CNA): Google_Devices
Estado en NVD: Awaiting Analysis

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Android

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Android

6.7Media

CVE-2026-95404 ayer

Google Android

In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interact…

Sin puntuación

CVE-2026-95399 ayer

Google Android

In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction i…

7.5Alta

CVE-2026-59623 ayer

Google Android

In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User in…

7.5Alta

CVE-2026-59613 ayer

Google Android

In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is n…

7.5Alta

CVE-2026-59611 ayer

Google Android

In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction…

7.5Alta

CVE-2026-59603 ayer

Google Android

In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retry handling due to a use after free. This could lead to remote denial of service with no additional execution privilege…