CVE-2026-20484

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004...

CVE-2026-20484

Technical details about CVE-2026-20484 are not publicly provided in the connected documents. The description notes local information disclosure and a patch ID, but no affected product/version specifics are given. Monitor for updates.

EUVD-2026-52071

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935...

CVE-2026-20497

In geniezone, CVE-2026-20497 describes an out-of-bounds write due to a missing bounds check that could enable local privilege escalation for an actor already with System privilege. No user interaction is required. Affected patch IDs are ALPS10965550 and ALPS11393405 (Issue MSV-6941). The CVSS con...

CVE-2026-20477

CVE-2026-20477 describes a local privilege escalation flaw where an out-of-bounds write occurs due to a missing bounds check in display code. Successful exploitation could grant SYSTEM-level privileges without user interaction. The vulnerability is associated with Patch ID ALPS11009963 and Issue ...

CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20474

Technical details about CVE-2026-20474 (affected products, versions, root cause) are not publicly available in the provided documents. Monitor for updates and forthcoming advisories from vendors and CVE databases.

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759...

CVE-2026-20472

CVE-2026-20472 describes a vulnerability in the TFA component where an out-of-bounds write results from a missing bounds check. The issue could allow local denial of service if an attacker already has System privileges, with no user interaction required. A patch is available (Patch ID: ALPS109914...

CVE-2026-20469

In trustedmem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533...

EUVD-2026-52058

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741...

CVE-2026-20468

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741...

CVE-2026-20467

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767...

PT-2026-67185

Name of the Vulnerable Software and Affected Versions geniezone affected versions not specified Description A missing permission check allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it does not require us...

CVE-2026-44595

Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one...

CVE-2026-44595

CVE-2026-44595 affects Yamcs’ core IAM API endpoints: GET /api/iam/users, GET /api/iam/users/{name}, GET /api/iam/groups, and GET /api/iam/groups/{name}. The root cause is missing enforcement of SystemPrivilege.ControlAccess in Yamcs’ IAM API (IamApi.java), enabling any authenticated user—even wi...

CVE-2026-21052

Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege...

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...