๐Ÿ” CVE Alert

CVE-2026-0198

MEDIUM 4.4
CVSS Score
4.4
EPSS Score
0.0%
EPSS Percentile
0th

In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Vendor google
Product android
Ecosystems
Industries
TechnologyMobile
Published Oct 6, 2026
Last Updated Oct 6, 2026
Stay Ahead of the Next One

Get instant alerts for google android

Be the first to know when new medium vulnerabilities affecting google android are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Google / Android
Android kernel

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
source.android.com: https://source.android.com/docs/security/bulletin/pixel/2026/2026-10-01