CVE-2026-55335
Published Nov 10, 2026
CVSS n/a
EPSS < 1%
KEV · Not listed
Description
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Products
-
CVE record
-
NVD configurations
No data
-
Red Hat packages
No data
-
OpenCVE enrichment
No data
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Android | unaffected |
|
No data.
No data.
No data available yet.
Remediation
Tracking
Advisories
Metrics
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.176% probability within 30 days)
Key SSVC decision points have not yet been added.
References
History
Nov 12, 2026 10:15 PM
Title updated. Weaknesses updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Use-After-Free Leading to Remote Code Execution on Android | |
| Weaknesses | CWE-416 |
Nov 12, 2026 4:00 AM
Title updated. Weaknesses updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Use-After-Free Leading to Remote Code Execution on Android | |
| Weaknesses | CWE-416 |
Nov 10, 2026 7:30 PM
Description updated. Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Subscriptions
No data.
Weaknesses
No weakness.
