EUVD-2026-52070

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

CVE-2026-20477

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658...

CVE-2026-20477

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658...

EUVD-2026-52064

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20475

CVE-2026-20475 describes a local escalation of privilege via an out-of-bounds write in display logic caused by a missing bounds check. Exploitation requires no user interaction and can occur if the attacker already has System privileges. A patch is available (Patch ID ALPS11004276; Issue ID MSV-7...

CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20474

Technical details about CVE-2026-20474 (affected products, versions, root cause) are not publicly available in the provided documents. Monitor for updates and forthcoming advisories from vendors and CVE databases.

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

EUVD-2026-52063

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759...

CVE-2026-20473

CVE-2026-20473 involves a memory corruption vulnerability (use-after-free) described as enabling local privilege escalation if an attacker already has System privileges. The issue is triggered in display logic and does not require user interaction for exploitation, with local access as the attack...

EUVD-2026-52059

In trustedmem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533...

CVE-2026-20468

In apusys, a local escalation of privilege via a confused deputy is possible if an attacker already has System privileges. This does not require user interaction. The CVE (CVE-2026-20468) lists a patch ID AUTO00833804 and Issue ID MSV-6741. CVSSv3.1 metrics indicate a Local attack vector, Low att...

CVE-2026-20468

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741...

CVE-2026-20467

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767...

CVE-2026-20466

CVE-2026-20466 : A heap buffer overflow in the secure boot flow may allow local privilege escalation with physical access and no user interaction. Affected platforms include MT2737 (AUTO00845351) and MT6880/MT6890/MT6990 (ALPS11072643); Issue MSV-6929. Patch guidance is provided in the MT securit...

EUVD-2026-52056

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2026-20466

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

PT-2026-67454

Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

PT-2026-67468

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...