{"api_version":"1","generated_at":"2026-11-10T22:13:32+00:00","cve":"CVE-2026-59586","urls":{"html":"https://cve.report/CVE-2026-59586","api":"https://cve.report/api/cve/CVE-2026-59586.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-59586","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-59586"},"summary":{"title":"CVE-2026-59586","description":"In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","state":"PUBLISHED","assigner":"Google_Devices","published_at":"2026-11-10 20:19:29","updated_at":"2026-11-10 21:46:39"},"problem_types":["Information disclosure"],"metrics":[],"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","name":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01","refsource":"dsap-vuln-management@google.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59586","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59586","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Google","product":"Android","version":"affected Android kernel","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Android","vendor":"Google","versions":[{"status":"affected","version":"Android kernel"}]}],"descriptions":[{"lang":"en","value":"In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."}],"problemTypes":[{"descriptions":[{"description":"Information disclosure","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-11-10T19:22:05.040Z","orgId":"83238938-5644-45f0-9007-c0392bcf6222","shortName":"Google_Devices"},"references":[{"url":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01"}],"x_generator":{"engine":"cvelib 1.7.1"}}},"cveMetadata":{"assignerOrgId":"83238938-5644-45f0-9007-c0392bcf6222","assignerShortName":"Google_Devices","cveId":"CVE-2026-59586","datePublished":"2026-11-10T19:22:05.040Z","dateReserved":"2026-07-06T06:23:27.542Z","dateUpdated":"2026-11-10T19:22:05.040Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-10 20:19:29","lastModifiedDate":"2026-11-10 21:46:39","problem_types":["Information disclosure"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"59586","Ordinal":"1","Title":"CVE-2026-59586","CVE":"CVE-2026-59586","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"59586","Ordinal":"1","NoteData":"In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","Type":"Description","Title":"CVE-2026-59586"}]}}}