CVE-2026-59020
Medium · 5.9CVSS
5.9
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121230 Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker… CWE-362
- CVE-2026-121079 Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to… CWE-362
- CVE-2026-121628 Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerability in… CWE-362
- CVE-2026-121408 FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redirection channel… CWE-362
- CVE-2026-58926 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client… CWE-362
- CVE-2026-59042 In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race… CWE-362
- CVE-2026-59043 In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory… CWE-362
- CVE-2026-59045 In multiple locations, there is a possible memory corruption due to a race condition. CWE-362