Security
Loading…

CVE-2026-49933

HIGHCVSS 7.8
View on NVD← Back to search
Description

In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Timeline
Published:October 5th, 2026 7:17 PM
Last modified:October 7th, 2026 1:14 PM
CVSS Scoring

CVSS v3: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Software
From NVD CPE configuration data

Vendors

google

Products

android
Weaknesses (CWE)
CWE-824
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute