CVE-2026-58876 in Android

摘要

由 MITRE • 2026-11-02

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 负责: Google Android
• 预定: 2026-07-02
• 披露: 2026-11-02
• 管理: 已接受
• 条目: VDB-430030
• CPE: 20261102
• CWE: CWE-416 (已确认)
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Finance, Lawfirm, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-58876
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-58876
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-58876/