EUVD-2026-92179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-49176_BOF

BOF de CVE-2026-49176 para Cobalt Strike Beacon Object File BOF de Cobalt Strike para escalada de privilegios local a través del WalletService de Windows CVE-2026-49176 , corregido en julio de 2026. Desde un Beacon de integridad media usuario estándar, esta herramienta prepara una base de datos E...

EUVD-2026-92181

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143...

CVE-2026-20542

The apusys component is vulnerable to a memory corruption issue caused by a use after free vulnerability (CWE-416). This flaw could enable a local escalation of privilege if a malicious actor has already acquired System privilege on the affected system. No user interaction is required for exploit...

CVE-2026-20537

A memory corruption vulnerability exists in aidl due to a use after free condition (CWE-416 ). This flaw could allow a malicious actor with System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS111852...

EUVD-2026-92187

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. If a malicious actor has already obtained System privilege , they could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Pa...

CVE-2026-20533

A vulnerability exists in the display component that allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor has already obtained System privilege , they can exploit this flaw without user interaction. Remediation is available via Patch ID: ALPS112966...

EUVD-2026-92190

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167...

CVE-2026-20530

A vulnerability in the display component allows for an out-of-bounds write due to a missing bounds check . This flaw could enable a local escalation of privilege for a malicious actor who has already obtained System privilege . No user interaction is required for exploitation. Remediation is avai...

CVE-2026-20529

A vulnerability exists in battery functionality due to a missing bounds check , leading to a possible out-of-bounds write . A malicious actor who has already obtained System privilege could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interactio...

EUVD-2026-92194

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217...

CVE-2026-20588

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...

EUVD-2026-92197

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...

CVE-2026-20588

A missing bounds check in mtee can lead to a local escalation of privilege . This vulnerability could be exploited by a malicious actor who has already obtained System privilege , and no user interaction is required. Remediation is available via Patch ID: ALPS11383899 (Issue ID: MSV-9607). No spe...

EUVD-2026-92198

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608...

CVE-2026-20587

A type confusion vulnerability in mtee allows for a local escalation of privilege . If an attacker already possesses System privilege , they can exploit this flaw to increase their permissions without requiring user interaction. Remediation is available via Patch ID: ALPS11383899 (Issue ID: MSV-9...

CVE-2026-20587

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608...

EUVD-2026-92199

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800...

CVE-2026-20579

A type confusion vulnerability in vdec leads to a possible out-of-bounds write . If a malicious actor already possesses System privilege , they could achieve a local escalation of privilege . This vulnerability does not require user interaction for exploitation. Remediation is available via Patch...