In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Thu, 12 Nov 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Race Condition in Face Status API Enables Local Privilege Escalation | |
| Weaknesses | CWE-892 |
Thu, 12 Nov 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 12 Nov 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Race Condition in Face Status API Enables Local Privilege Escalation | |
| Weaknesses | CWE-362 CWE-892 |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Google_Devices
Published: 2026-11-10T19:22:40.861Z
Updated: 2026-11-12T19:28:46.710Z
Reserved: 2026-09-22T05:59:06.218Z
Link: CVE-2026-95399
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T20:19:47.863
Modified: 2026-11-12T20:18:54.307
Link: CVE-2026-95399
Redhat
No data.