Description
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Published: 2026-11-02
Score: 8.4 High
EPSS: n/a
KEV: No
Impact: Privilege Escalation
Action: Assess Impact
AI Analysis

Impact

A race condition in certain Android components can lead to a use‑after‑free error. An attacker can trigger this flaw remotely, allowing escalation of privileges without needing additional execution rights. The vulnerability can be abused without any user interaction, enabling an attacker to gain system level access.

Affected Systems

The flaw affects Google Android platforms; specific product versions are not disclosed, so all Android releases are considered potentially vulnerable until an official patch is released.

Risk and Exploitability

The CVSS score is not provided, and the EPSS score is unavailable, but the vulnerability is listed as not present in the CISA KEV catalog. Because it requires no user action and can be triggered remotely, the risk of exploitation remains high. An attacker could leverage this flaw to execute privileged operations or compromise device integrity.

Generated by OpenCVE AI on November 2, 2026 at 21:41 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Android security updates and patches issued by Google.
  • Disable or remove apps sourced from unknown or untrusted developers and enforce strict permission settings on installed applications.
  • Monitor devices for unauthorized privilege changes and isolate affected devices until official fixes are applied.

Generated by OpenCVE AI on November 2, 2026 at 21:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 02 Nov 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Mon, 02 Nov 2026 22:00:00 +0000

Type Values Removed Values Added
Title Remote Privilege Escalation via Use‑After‑Free in Android
Weaknesses CWE-362

Mon, 02 Nov 2026 21:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Mon, 02 Nov 2026 20:00:00 +0000

Type Values Removed Values Added
Description In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References

Subscriptions

Google Android
cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published:

Updated: 2026-11-02T21:03:47.593Z

Reserved: 2026-06-16T17:39:57.723Z

Link: CVE-2026-55275

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-02T20:17:44.783

Modified: 2026-11-02T21:17:32.923

Link: CVE-2026-55275

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-02T22:00:06Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

  • CWE-416

    Use After Free