CVE
CVE-2026-58876
Google · Android
- First Reported
- Nov 4, 2026
- Latest Reported
- Nov 4, 2026
CVE Enrichment
- EPSS
- 0.17%
- EPSS Percentile
- 6.66%
- CISA KEV
- Not listed
Description
In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Technical Details
- CNA / NVD Source
- [email protected]
- Published
- 03-Nov-2026 03:17
- Last Modified
- 04-Nov-2026 12:18
- EPSS Date
- 2026-11-03
CNA Products / Version Status
- Google · Android
Source: CNA · [email protected]
Default status: unaffected
17 — affected
16-qpr2 — affected
16 — affected
15 — affected
14 — affected
References
Last enrichment sync: 04-Nov-2026 19:58
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Phones running Android 10 or later may also receive some fixes through Google Play system updates. This month's list for those updates includes another Critical flaw, CVE-2026-58876. Google Patches Critical Android Flaw That Could Enable Remote Code Execution Without User Interaction
CVE (3)
People (1)
Vendors (3)
Products (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.