Description
In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Published: 2026-09-15
Score: n/a
EPSS: n/a
KEV: No
Impact: Local Privilege Escalation
Action: Patch
AI Analysis

Impact

The vulnerability originates from a logic error in the Android operating system that allows a local user to obtain system execution privileges. The code flaw is exploitable without any user interaction, meaning any user with physical or local access to the device can trigger it. The description does not mention any impact on confidentiality, integrity, or availability beyond the privilege escalation itself.

Affected Systems

Android running on Google‑manufactured devices, such as Pixel smartphones and tablets, are affected. No specific Android build or OS version is listed, so all current releases may contain the flaw until it is addressed by a security update.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no documented exploitation at this time. Because the attack requires only local access and no user interaction, an attacker with physical or local access to the device could exploit the flaw to gain elevated system privileges. Public exploitation remains unknown, but the risk of privilege escalation remains significant for any user with local device access.

Generated by OpenCVE AI on September 16, 2026 at 00:46 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest Android security update released by Google for the affected device, as outlined in the Pixel/Android security bulletin.
  • Restrict the use of applications that request system or privileged permissions, and disable or uninstall any such apps that are not essential.
  • Monitor device logs for any unexpected privilege‑escalation events or abnormal system activity, and consider implementing device administration restrictions for non‑essential functions.

Generated by OpenCVE AI on September 16, 2026 at 00:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Tue, 15 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Description In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Google_Devices

Published:

Updated: 2026-09-15T18:34:12.530Z

Reserved: 2026-06-23T16:20:45.087Z

Link: CVE-2026-56973

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-15T19:17:29.240

Modified: 2026-09-15T19:17:29.240

Link: CVE-2026-56973

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-16T01:00:14Z

Weaknesses

No weakness.