CVE-2026-58744

Received Received - Intake

Privilege Escalation in Android Due to Improper Input Validation

Publication date: 2026-09-15

Last updated on: 2026-09-18

Assigner: Google Devices

Description

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-18

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-58744

EUVD

EUVD-2026-79015

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker to escalate their privileges on a system due to improper input validation in multiple locations. It requires no additional execution privileges or user interaction to exploit, meaning it can be triggered locally.

Impact Analysis

An attacker could exploit this to gain higher-level access on your system, potentially allowing them to perform unauthorized actions, access sensitive data, or install malicious software without needing to trick you into running anything.

Compliance Impact

This vulnerability allows local privilege escalation with high impact on confidentiality, integrity, and availability. Such issues may violate compliance requirements in GDPR (e.g., unauthorized access to personal data) and HIPAA (e.g., unauthorized access to protected health information) due to insufficient access controls and input validation.

Mitigation Strategies

Apply vendor-provided security patches or updates to address improper input validation issues. Monitor official security advisories for patches. Restrict user permissions where possible to limit potential privilege escalation paths.

Hi! I’m here to help you understand CVE-2026-58744. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70