CVE-2026-55357
No scoreFix available
In CPM, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVPUB-A-513139951No score
In CPM, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Record
PUB-A-513139951- Updated
- 2026-11-10
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android | Pixel-family specific:0 up to Pixel-family specific:2026-09-05, plus listed versions Pixel-family specific | Pixel-family specific:2026-09-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-55357 is a vulnerability with no CVSS score yet in :unknown:, published September 1, 2026. No source lists public exploit code. Fixed in :unknown: Pixel-family specific:2026-09-05.