{"id":"CVE-2026-55275","published":"2026-11-02T20:17:44.783","lastModified":"2026-11-03T05:18:44.533","description":"In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-11-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in multiple locations due to a race condition allows remote privilege escalation without user interaction or additional privileges.","exploitability":"Exploitation requires precise timing to trigger the use-after-free condition; no user interaction or additional privileges are needed.","blast_radius":"Successful exploitation could lead to full system compromise (CIA impact) from a local attacker, but remote exploitation would require additional vector access or misconfiguration.","remediation":"Apply vendor patch when available; until then, disable affected functionality or restrict local access to the vulnerable components.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["use-after-free","race-condition","privilege-escalation","rce","local","cwe-416"],"model":"garnet-coder","analyzedAt":"2026-11-03T10:03:55.087Z"}}