PUB-A-510473670: Android/:unknown: vulnerability

Q: What does an attacker need to exploit this issue?

Exploitation requires execution privileges and user interaction. The issue is described as enabling remote escalation of privilege.

Q: Where can I find the vendor security information for this issue?

The Android security bulletin dated 2026-11-01 is referenced for this issue. An OSV vulnerability record is also provided.

Published Nov 1, 2026

Updated

In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. This could lead to remote escalation of privilege with execution privileges needed. User interaction is for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

Exploitation requires execution privileges and user interaction. The issue is described as enabling remote escalation of privilege.

Where can I find the vendor security information for this issue?

The Android security bulletin dated 2026-11-01 is referenced for this issue. An OSV vulnerability record is also provided.

PUB-A-510473670: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Where can I find the vendor security information for this issue?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Where can I find the vendor security information for this issue?