{"id":"CVE-2026-58859","published":"2026-10-05T19:17:25.073","lastModified":"2026-10-07T15:14:02.667","description":"In multiple places, there is a possible  denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-248"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-10-01","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A denial of service vulnerability in Google's Android platform allows local attackers to escalate privileges without needing additional execution privileges. The flaw occurs when uncaught exceptions lead to system instability, potentially enabling privilege escalation.","exploitability":"Exploitation is relatively straightforward for local attackers with minimal preconditions, requiring no user interaction and no additional execution privileges beyond initial access.","blast_radius":"The vulnerability could affect a wide range of Android devices and applications, potentially allowing attackers to gain elevated privileges across multiple system components and services.","remediation":"Upgrade to Android 15 or later to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","denial-of-service","android"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:56:45.056Z"}}