CVE-2026-20425

A missing bounds check in the display component leads to a possible out of bounds write . This vulnerability could allow a malicious actor who has already obtained System privileges to achieve a local escalation of privilege . Exploitation does not require user interaction. Affected systems inclu...

EUVD-2026-9153

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539...

CVE-2026-20445: Time-of-check Time-of-use (TOCTOU) Race Condition

In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184...

CVE-2026-20441: Out-of-bounds Write

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803...

CVE-2026-20440: Improper Validation of Specified Index, Position, or Offset in Input

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824...

CVE-2026-20426: Out-of-bounds Write

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538...

CVE-2026-20444: Out-of-bounds Write

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721...

CVE-2026-20439: Use After Free

In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826...

CVE-2026-20437: Use After Free

In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431940; Issue ID: MSV-5843...

CVE-2026-20443: Use After Free

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5722...

CVE-2026-20442: Use After Free

In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723...

CVE-2026-20424: Out-of-bounds Read

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540...

CVE-2026-20428: Out-of-bounds Write

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536...

CVE-2026-20427: Out-of-bounds Write

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537...

PT-2026-22567

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The software may experience a system crash due to a use after free condition in the display component. This could result in a local denial of service if an attacker has already...

PT-2026-22553

Name of the Vulnerable Software and Affected Versions Oracle Solaris affected versions not specified Description The software contains a possible out-of-bounds write due to a missing bounds check in the display component. Successful exploitation of this issue could lead to local escalation of...

PT-2026-22569

Name of the Vulnerable Software and Affected Versions Apple Safari affected versions not specified Description A memory corruption issue exists in the display component due to a missing bounds check. Successful exploitation of this issue could lead to local escalation of privilege if an attacker...

PT-2026-22552

Name of the Vulnerable Software and Affected Versions Citrix Virtual Apps and Desktops affected versions not specified Description An out-of-bounds read issue exists in the display component due to a missing bounds check. Successful exploitation could lead to local information disclosure if an...

PT-2026-22570

Name of the Vulnerable Software and Affected Versions MDDP affected versions not specified Description A race condition exists in MDDP that may cause a system crash, potentially leading to a local denial of service. Exploitation requires an attacker to already possess System privileges and does n...

CVE-2026-20429: Out-of-bounds Read

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5535...