CVE-2026-20441: Out-of-bounds Write

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803...

CVE-2026-20424: Out-of-bounds Read

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540...

CVE-2026-20428: Out-of-bounds Write

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536...

PT-2026-22568

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description A memory corruption issue exists due to use after free in the display component. Successful exploitation could allow a malicious actor with System privileges to gain local escalati...

PT-2026-22567

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The software may experience a system crash due to a use after free condition in the display component. This could result in a local denial of service if an attacker has already...

PT-2026-22556

Name of the Vulnerable Software and Affected Versions Apple Display affected versions not specified MediaTek MT6739 affected versions not specified Description The display component contains a flaw due to a missing bounds check, potentially leading to an out-of-bounds write. Successful exploitati...

CVE-2026-20437: Use After Free

In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431940; Issue ID: MSV-5843...

CVE-2026-20440: Improper Validation of Specified Index, Position, or Offset in Input

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824...

PT-2026-22570

Name of the Vulnerable Software and Affected Versions MDDP affected versions not specified Description A race condition exists in MDDP that may cause a system crash, potentially leading to a local denial of service. Exploitation requires an attacker to already possess System privileges and does n...

PT-2026-22555

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10320471 Description The issue involves a potential escalation of privilege due to a missing bounds check in the display component. Successful exploitation allows a malicious actor with System privilege to gain local...

PT-2026-22569

Name of the Vulnerable Software and Affected Versions Apple Safari affected versions not specified Description A memory corruption issue exists in the display component due to a missing bounds check. Successful exploitation of this issue could lead to local escalation of privilege if an attacker...

CVE-2026-20436: Buffer Copy without Checking Size of Input

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID:...

CVE-2026-20442: Use After Free

In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723...

CVE-2026-20445: Time-of-check Time-of-use (TOCTOU) Race Condition

In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184...

CVE-2026-20444: Out-of-bounds Write

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721...

CVE-2026-20426: Out-of-bounds Write

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538...

CVE-2026-20429: Out-of-bounds Read

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5535...

CVE-2026-20439: Use After Free

In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826...

PT-2026-22566

Name of the Vulnerable Software and Affected Versions MAE affected versions not specified Description The software contains a possible out of bounds write due to a missing bounds check. Successful exploitation could lead to local escalation of privilege if an attacker has already obtained System...

PT-2026-22553

Name of the Vulnerable Software and Affected Versions Oracle Solaris affected versions not specified Description The software contains a possible out-of-bounds write due to a missing bounds check in the display component. Successful exploitation of this issue could lead to local escalation of...