AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-0186

Google Android: privilege escalation

Google

CVE-2026-0186 · Published Sep 15, 2026 · updated Sep 21, 2026

Medium6.7
No fix yet
Google advisory

In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected versions

PackageAffectedFixed in
Android
Product
<= Android kernelNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-693

More Google advisories

All Google