CVE-2026-56952

In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

• CWE-862

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01

Published

Oct 6, 2026

Last Modified

Oct 7, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5694The Quick Interest Slider plugin for WordPress is vulnerable…7.2
• CVE-2026-56941In multiple functions of fpc_tee_hal.c, there is a possible …8.4
• CVE-2026-56942In ReadTileInfo of vp9hwd_headers.cc, there is a possible ou…8.8
• CVE-2026-56945In VPU, there is a possible out-of-bounds write due to a con…7.8
• CVE-2026-5695Arbitrary file upload vulnerability due to a lack of proper …8.4
• CVE-2026-56950In validate_ns_buf of mbu_class.rs, there is a possible info…4.4
• CVE-2026-56958In gf_algo_get_cached_dump_data of gf_algo.c, there is a pos…5.5
• CVE-2026-5696Reflected Cross-Site Scripting (XSS) in Microweber. The vuln…5.9
• CVE-2026-56960In multiple locations, there is a possible use-after-free du…9.8
• CVE-2026-56964In multiple locations, there is a possible use-after-free du…6.4
• CVE-2026-56967In Cellular Modem, there is a possible out-of-bounds write d…8
• CVE-2026-56968GNU SASL before 2.2.4 lacks sanitization of a short challeng…5.3