Use-After-Free Vulnerability in Android Kernel
CVE-2026-59044

8.4HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-59044?

A logic error in the Android Kernel can result in a use-after-free vulnerability across multiple locations in the code. This flaw allows for local escalation of privileges without requiring additional execution permissions, and does not need user interaction for exploitation. Such vulnerabilities pose significant security risks as they can be leveraged by attackers to gain unauthorized access to system functionalities and sensitive data.

Affected Version(s)

Android Android kernel

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.