CVE-2026-58783: Android kernel local denial of service due to logic error

CVE-2026-58783 · Severity: info · Published 2026-11-10

The Android operating system kernel contains a logic error in multiple locations that allows a local attacker with system-level privileges to cause a denial of service, disrupting device functionality. No user interaction is required for exploitation, meaning an attacker with system access can trigger the issue automatically.

Technologies: Google Android. Vendors: Google.

Quick answers

Is CVE-2026-58783 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-58783 being exploited in the wild.
How severe is CVE-2026-58783?
Informational severity, published 10 November 2026.
Which products and versions are affected?
Google Android.
Is there a fix for CVE-2026-58783?
Yes: fixed in Android security patch level 2026-11-05 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-58783 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2026-58783?
Check whether you run Google Android. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: Android security patch level 2026-11-05 or later

Technical details

A logic error in multiple kernel code locations enables a local denial of service condition. The vulnerability requires System execution privileges to exploit and can be triggered without user interaction. The issue affects Android systems and is addressed in security patch level 2026-11-05 or later.

Affected products

  • Google Android

Timeline

  • 2026-11-10: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.