{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2026-0169","sourceIdentifier":"dsap-vuln-management@google.com","published":"2026-11-10T20:17:20.403","lastModified":"2026-11-10T21:46:32.010","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."}],"affected":[{"source":"dsap-vuln-management@google.com","affectedData":[{"vendor":"Google","product":"Android","defaultStatus":"unaffected","versions":[{"version":"Android kernel","status":"affected"}]}]}],"metrics":{},"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","source":"dsap-vuln-management@google.com"}]}}