What is the CVSS score of EUVD-2026-74001?

EUVD-2026-74001 has a CVSS 3.1 base score of 3.3 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Android EUVD-2026-74001

| CVE-2026-45525 LOW

Improper Input Validation (CWE-20)

2026-09-08 security@android.com

GHSA-vm3c-q6j8-246v

Information Disclosure Google

3.3

CVSS 3.1 · Vendor: android

Severity by source

Vendor (android) PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

3.3 LOW

Local-only exploitation by low-privilege app with no interaction; limited confidentiality impact only; no integrity or availability effect.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (android).

CVSS VectorVendor: android

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Metadata Corrected

Sep 10, 2026 - 16:40 vuln.today

tag: Google added

Analysis Generated

Sep 10, 2026 - 16:28 vuln.today

CVSS changed

Sep 10, 2026 - 16:22 NVD

3.3 (LOW)

CVE Published

Sep 08, 2026 - 19:17 cve.org

LOW 3.3

CVE Published

Sep 08, 2026 - 19:17 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AnalysisAI

Local information disclosure affects Android 14 through 17, including the Android 16-QPR2 branch, due to a logic error causing improper data sanitization across multiple code locations. An unprivileged local application can exploit this flaw without any user interaction to read data it should not have access to. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires a low-privileged application already installed and running on the affected Android device (PR:L, AV:L). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Real-world risk is low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the September 2026 Android Security Bulletin patch (2026-09-01 security patch level or later), available from Google at https://source.android.com/docs/security/bulletin/2026/2026-09-01. … Detailed patch versions, workarounds, and compensating controls in full report.