CVE-2026-59021

In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://source.android.com/docs/security/bulletin/2026/2026-11-01	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:google:android:14.0:::::::*
	cpe:2.3:o:google:android:15.0:::::::*
	cpe:2.3:o:google:android:16.0:-::::::
	cpe:2.3:o:google:android:16.0:qpr2::::::
	cpe:2.3:o:google:android:17.0:-::::::

History

04 Nov 2026, 19:50

Type	Values Removed	Values Added
CPE		cpe:2.3:o:google:android:17.0:-:::::: cpe:2.3:o:google:android:15.0:::::::* cpe:2.3:o:google:android:16.0:qpr2:::::: cpe:2.3:o:google:android:16.0:-:::::: cpe:2.3:o:google:android:14.0:::::::*
First Time		Google Google android
References	~~() https://source.android.com/docs/security/bulletin/2026/2026-11-01 -~~	() https://source.android.com/docs/security/bulletin/2026/2026-11-01 - Vendor Advisory

03 Nov 2026, 21:17

Type	Values Removed	Values Added
CWE		CWE-20
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.2

02 Nov 2026, 20:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-11-02 20:17

Updated : 2026-11-04 19:50

NVD link : CVE-2026-59021

Mitre link : CVE-2026-59021

CVE.ORG link : CVE-2026-59021

JSON object : View

Products Affected

google

android

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-59021", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59021", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-03T20:11:47.772881Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "affected": [{"source": "security@android.com", "affectedData": [{"vendor": "Google", "product": "Android", "versions": [{"status": "affected", "version": "17"}, {"status": "affected", "version": "16-qpr2"}, {"status": "affected", "version": "16"}, {"status": "affected", "version": "15"}, {"status": "affected", "version": "14"}], "defaultStatus": "unaffected"}]}], "published": "2026-11-02T20:17:57.040", "references": [{"url": "https://source.android.com/docs/security/bulletin/2026/2026-11-01", "tags": ["Vendor Advisory"], "source": "security@android.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation."}], "lastModified": "2026-11-04T19:50:08.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"}, {"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"}, {"criteria": "cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02882AB1-7993-47DD-84A0-8DF4272D85ED"}, {"criteria": "cpe:2.3:o:google:android:16.0:qpr2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9123E1DD-8607-427B-82B9-6E44B96C90F1"}, {"criteria": "cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3D15FD9-304E-4270-81C7-C8D9024D457D"}], "operator": "OR"}]}], "sourceIdentifier": "security@android.com"}