6.2

CVE-2026-56888

EPSS 0.07%
Veröffentlicht 15.09.2026 18:33:53
Zuletzt bearbeitet 21.09.2026 17:19:16
Erkennungen
Login

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.001

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	6.2	2.5	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-56888

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-56888

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-56888

EUVD