CVE-2026-9593

The CVE-2026-9593 entry describes a vulnerability in the iDTM FDI where an attacker with elevated privileges on the host can enable the debug interface by placing a crafted file in the application directory. This could lead to unauthorized access to connected devices and exposure, modification, o...

CVE-2026-16534

The CVE-2026-16534 entry concerns the Import and export users and customers WordPress plugin (pre-2.4.2). The flaw arises because the plugin does not enforce WordPress role-assignment and per-user edit permissions during CSV import, allowing a user who only has the user-creation capability to cre...

CVE-2026-20498

In geniezone, a missing permission check enables local escalation of privilege if an attacker already has System privileges. This vulnerability does not require user interaction. A patch identified as ALPS10900493 (Issue MSV-6765) is available to address the issue. The available connected records...

EUVD-2026-52087

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765...

EUVD-2026-52085

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296...

CVE-2026-20495

In the Bluetooth driver, a missing permission check enables a local escalation of privilege with user execution privileges required and no user interaction needed. Patch ID: WCNCR00488300; Issue ID: MSV-7296. Connected documents corroborate the same details across CVE-2026-20495, NVD, CVE record,...

CVE-2026-20486

In the provided documents, CVE-2026-20486 affects the imgsensor component. The root cause is an incorrect error handling in imgsensor that can trigger an application crash, potentially enabling local escalation of privilege for an attacker already holding System privileges. Exploitation does not ...

EUVD-2026-52077

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833...

CVE-2026-20485

CVE-2026-20485 affects HFRP. The issue is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation for an attacker who already has System privileges. Exploitation requires no user interaction. Patch ID ALPS11049569 (Issue MSV-7931) is available. The connected d...

EUVD-2026-52076

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931...

CVE-2026-20483

In Telephony, a vulnerability exists due to a missing permission check that could enable local privilege escalation with no additional execution privileges required and without user interaction. Affected component: Telephony. Root cause: insufficient permission validation. Impact: local privilege...

EUVD-2026-52073

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243...

EUVD-2026-52071

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935...

CVE-2026-20481

CVE-2026-20481 affects the geniezone component, with an out-of-bounds write caused by a missing bounds check. The impact is local escalation of privilege if an attacker already has the System privilege, and exploitation requires no user interaction. The available references indicate a patch ident...

EUVD-2026-52070

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

CVE-2026-20497

In geniezone, a vulnerability exists: an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege if an attacker already has System privilege. Exploitation reportedly does not require user interaction. Affected detail supports Patch IDs ALPS10965550 and ALPS113...

CVE-2026-20477

CVE-2026-20477 describes an out-of-bounds write in display caused by a missing bounds check, enabling local privilege escalation for an attacker already with System privileges; exploitation does not require user interaction. Patch available: ALPS11009963 (Issue MSV-7658). No vendor/product specif...

EUVD-2026-52066

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658...

EUVD-2026-52064

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20475

The CVE describes an out-of-bounds write in display due to a missing bounds check that could allow local escalation of privilege if an attacker already has System privileges. No user interaction is required for exploitation as described. Remediation is indicated by patch ID ALPS11004276 (Issue MS...