{"id":"CVE-2026-57013","aliases":[],"cve":{"records":[{"id":"CVE-2026-57013","source":"Google_Devices","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-23T16:26:29.783Z","published":"2026-11-10T19:21:04.312Z","modified":"2026-11-11T04:58:20.591Z"}],"publishers":[{"name":"Google_Devices","role":"CNA","organizationId":"83238938-5644-45f0-9007-c0392bcf6222","modified":"2026-11-10T19:21:04.312Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-11T04:58:20.591Z"}],"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","tags":[],"source":"Google_Devices"}],"weaknesses":[{"id":"CWE-453","description":"CWE-453 Insecure Default Variable Initialization","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an…","titleSource":"Google_Devices","descriptionSource":"Google_Devices","description":"In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","score":6.7,"severity":"medium","published":"2026-11-10T19:21:04.312Z","modified":"2026-11-11T04:58:20.591Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Google","name":"Android","platforms":[],"versions":[{"version":"Android kernel","status":"affected"}],"defaultStatus":"unaffected","cpes":[],"source":"Google_Devices","url":"https://www.cve.org/CVERecord?id=CVE-2026-57013"}],"remediation":[],"references":["https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01"],"sources":[{"name":"CVE","id":"CVE-2026-57013","modified":"2026-11-11T04:58:20.591Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-57013"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":6.7}],"sourceAffected":[],"observedAt":"2026-11-11T05:06:05.429Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:20:35.853Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T03:50:34.718Z","attemptedAt":"2026-11-11T03:50:34.718Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-11T03:50:31.785Z","attemptedAt":"2026-11-11T03:50:31.785Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T03:50:31.785Z","attemptedAt":"2026-11-11T03:50:31.785Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T03:50:31.785Z","attemptedAt":"2026-11-11T03:50:31.785Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-122747","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122747","modified":"Nov 11, 2026, 1:09:36 AM","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T03:50:31.785Z"},{"source":"GitHub Advisory Database","id":"GHSA-crr5-mf4h-x64p","url":"https://github.com/advisories/GHSA-crr5-mf4h-x64p","modified":"2026-11-11T03:35:28Z","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T03:50:31.785Z"},{"source":"NVD","id":"CVE-2026-57013","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57013","modified":"2026-11-11T01:17:17.667","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T03:50:34.718Z"}],"aiSummary":{"text":"Android kernel has an insecure default value, allowing local escalation of privilege with system execution privileges. User interaction is not needed for exploitation. The vulnerability is due to an insecure default variable initialization.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T03:06:08.198Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-57013"}]}}