CVE-2025-36896Critical· 9.8▾ MidnightWLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the CISA ADP record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.
Android Android kernelRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-49912Medium· 4.0In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code
CVE-2026-59005High· 8.4In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check
CVE-2026-49934High· 7.8In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation
CVE-2026-55263High· 8.4In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI
CVE-2026-55261High· 8.4In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check
CVE-2026-0053High· 8.4In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users