EUVD-2026-52055

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...

CVE-2026-20465

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...

CVE-2026-20465

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...

EUVD-2026-52054

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

PT-2026-67172

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004...

PT-2026-67549

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Incorrect Authorization issue exists that could allow an attacker to achieve privilege escalation and gain elevated privileges. This flaw can be exploited without any us...

PT-2026-67182

Name of the Vulnerable Software and Affected Versions Bluetooth driver affected versions not specified Description A missing permission check in the Bluetooth driver allows for a permission bypass. This flaw enables local escalation of privilege, requiring only user execution privileges...

CVE-2026-48399: Violation of Secure Design Principles

Adobe Campaign Classic ACC is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require...

PT-2026-67176

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...

PT-2026-67550

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains a violation of secure design principles that allows for a security feature bypass. An attacker can exploit this issue to circumvent...

PT-2026-67166

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 Note: For MT6880, MT6890, MT6988, MT6990 / AUTO00851293...

PT-2026-67181

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001,...

PT-2026-67159

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...

PT-2026-67185

Name of the Vulnerable Software and Affected Versions geniezone affected versions not specified Description A missing permission check allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it does not require us...

PT-2026-67546

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains an SQL Injection flaw, which occurs when special elements in an SQL command are not properly neutralized. This allows a low-privileged...

PT-2026-67169

Name of the Vulnerable Software and Affected Versions geniezone affected versions not specified Description A missing bounds check in geniezone allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local escalati...

PT-2026-67162

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A race condition in display allows for a local escalation of privilege. This occurs when a malicious actor who has already obtained System privilege exploits the timing of events to gain...

PT-2026-67161

Name of the Vulnerable Software and Affected Versions Microsoft Display affected versions not specified Description A memory corruption issue exists in the display component caused by a use after free condition. This occurs when a program continues to use a pointer after it has been freed, which...

PT-2026-67156

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A confused deputy issue allows for a local escalation of privilege. This occurs when a malicious actor who has already obtained System privilege can leverage the system to gain further...

PT-2026-67158

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189...