CVE-2026-56914
Received Received - Intake

Use-After-Free in Android OS Kernel

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Google Devices

Description
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-56914
EUVD
EUVD-2026-78962

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a use-after-free issue caused by improper locking in multiple locations. It allows an attacker to exploit the flaw to escalate privileges locally without needing additional execution rights or user interaction.

Impact Analysis

An attacker could exploit this to gain higher privileges on your system, potentially allowing them to take control of your device or access sensitive data. No user interaction or extra permissions are required for exploitation.

Mitigation Strategies

Apply vendor patches or updates as soon as they become available to address the improper locking issue. Monitor official security advisories for affected software or systems. Since this is a local privilege escalation, ensure all user accounts follow least privilege principles.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56914. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart