CVE Tools
Sign in

CVE-2026-56914

Published: Sep 15, 2026Updated: Sep 17, 2026 Sources: CVE List NVDCWE-416
8.4HIGH
NVD MITRE
EPSS Score
0.1%
Top 100.0%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
No Fix Available
Self-Check
Not available

Description

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In plain language

AI Act now

CVE-2026-56914 is an Android weakness where a local attacker can exploit a memory locking bug to raise privileges without needing any clicks or logins—if you have a hostile user on a device, you should treat it as urgent, but if no one else can access the device, risk may be lower.

Executive summary

CVE-2026-56914 is a local use-after-free caused by improper locking in Android, enabling privilege escalation without authentication or user interaction once an attacker has local access.

If affected, business impact
Device takeover by a local attackerAccess to private business dataDisruption through system compromisePotential malware persistence

What to do now

  1. Check whether any Android devices you manage are potentially exposed to untrusted physical/local access (e.g., shared company phones, devices kept in public-facing areas, field staff devices without tight physical controls).
  2. Identify the exact Android version and security patch level on each affected device.
  3. If a device is out of date, upgrade it to the latest Android security update available for that device/model line; if no fixed version is provided for CVE-2026-56914, plan to upgrade to the newest available security patch as an interim containment measure.
  4. Restrict local access: require device passcodes, enable full-disk encryption, and prevent unattended device access to reduce the chance an attacker can get local access.
  5. If you can’t confirm whether you’re fixed yet, isolate the device from sensitive access (VPN/internal apps, admin portals) until it’s upgraded and verified.
May need vendor / contractor work

CVSS Vector Breakdown

AV:LAC:LPR:NUI:NS:UC:HI:HA:H
Exploitability
AV:LAttack Vector
Local
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-416CWE-667

Affected Products

Google
commercial·USaka google inc, google llc
AndroidEmbeddedOS
Operating Systems / mobile-os

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.
Is your org exposed to CVE-2026-56914?Request an assessment to establish which checks are appropriate for your systems. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

2 techniques
Initial Access
Privilege Escalation
View detailed technique mapping

References

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01
source.android.com
News mentions
2

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-56914 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows