CVE-2026-0163General(google / android)

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (3 mentions)

Immediate actions

  • Prioritize remediation for google android systems immediately
  • Assume compromise if assets are exposed
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

5.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android

Threat summary

  • Active exploitation appears in 1 classified signals
  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • PoC mentioned or linked in 1 signal
  • General: 3 classified signals
  • Peaked at 3 mentions on most recent observed day (2026-08-05)
  • 4 total mentions across 2 days

Affected systems

Vendors
Products
android

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-08-04: 1Mentions · 2026-08-05: 3PoC Mentioned / Linked · 2026-08-05: 1Active Exploitation · 2026-08-05: 108-0408-05
Signal classification2 categories
General
375.0%
Active Exploitation
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-041
General1
2026-08-053
Active Exploitation1General2
Full discourse4 posts
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-64633 CVE-2017-20241 CVE-2017-20242 CVE-2025-29296 CVE-2026-0163 ..🧵👇

    Post summary

    The post merely enumerates several CVE identifiers without any additional context, exploitation details, or mitigation information.

    1001076
    29 followersView on X
  • ExploitGrid@exploitgrid
    General

    [CVE] CVE-2026-0163 [HIGH PRIORITY] 🔗 https://exploitgrid.net/cve/CVE-2026-0163

    Post summary

    The post announces CVE-2026-0163 as a high‑priority vulnerability and links to an external site, but supplies no technical details or exploit code.

    1000032
    29 followersView on X
  • VulDB 🛡@vuldb
    General

    The severity is increased for this new vulnerability affecting Google Android (CVE-2026-0163) https://vuldb.com/vuln/385924

    Post summary

    The post reports that the severity of a new Android vulnerability (CVE‑2026‑0163) has increased, but offers no technical, exploit, or mitigation details.

    00010128
    2.3K followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    Some increased actor activities are shown targeting Google Android (CVE-2026-0163) https://vuldb.com/vuln/385924/cti

    Post summary

    The statement indicates that malicious actors are increasingly targeting the Android CVE-2026-0163, suggesting that the vulnerability is being exploited in the wild.

    0000096
    2.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSgoogleandroid---

Explore more