18 matches found
CVE-2026-20686
This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data...
CVE-2026-20686
The CVE-2026-20686 entry corresponds to an Apple iOS/iPadOS issue fixed in versions 26.3 for both iOS and iPadOS. The available documents indicate the root cause was an input validation issue and that the impact is that an app may be able to access sensitive user data via the Contacts component. ...
CVE-2025-20686
creationtimestamp| type| source ---|---|--- 2025-07-08 16:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthoay2e4727...
CVE-2024-20686
creationtimestamp| type| source ---|---|--- 2024-01-09 20:16:24+00:00| seen| https://t.me/ctinow/165321 2025-05-03 02:16:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14674...
CVE-2024-20686
Win32k Elevation of Privilege Vulnerability...
CVE-2024-20686 Win32k Elevation of Privilege Vulnerability
...
CVE-2024-20686
CVE-2024-20686 is a Win32k elevation-of-privilege vulnerability in Windows Win32k subsystem. The connected documents identify the affected component as Win32k and describe the root cause as a privilege-escalation flaw in that subsystem, enabling an attacker with low privileges to gain elevated pr...
CVE-2023-20686
In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570826; Issue ID: ALPS07570826...
CVE-2023-20686
CVE-2023-20686 describes a race-condition in the display DRM path that enables a double-free vulnerability, potentially enabling local privilege escalation with SYSTEM privileges. The issue is described consistently across sources (NVD/Red Hat citations) as requiring no user interaction to exploi...
CVE-2022-20686
Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...
CVE-2022-20686
CVE-2022-20686 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, specifically the LLDP functionality. The root cause is missing length validation in certain LLDP packet header fields, allowing an unauthenticated, remote attacker to execute arbitrary code on the device and cause the ...
Dell BIOS Input Validation Vulnerability (CNVD-2022-20686)
Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...
CVE-2018-20686
The CVE-2018-20686 entry is rejected/not used and does not represent an active vulnerability.
CVE-2021-20686
Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20686
CVE-2021-20686 is a stored cross-site scripting vulnerability in Kagemai 0.8.8 that allows an arbitrary script to run in a user’s browser. The public documents identify the vulnerable product and version (Kagemai 0.8.8) and describe the impact as arbitrary script execution via unspecified vectors...
CVE-2019-20686
The CVE affects multiple NETGEAR router models (D6200, D7000, JR6150, PR2000, R6020, R6080, R6050, R6120, R6220, R6260, R6700v2, R6800, R6900v2, WNR2020) with a pre-100% specific root cause of a buffer overflow exploitable by an unauthenticated attacker. Affected firmware versions are listed in t...
CVE-2019-20686
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.40, R6080 before 1.0.0.40, R6050 before 1.0.1.18, R6120 before 1.0.0.48, R6220...