CVE-2026-20413

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694...

CVE-2026-20414

A use after free vulnerability exists in imgsys , potentially leading to local escalation of privilege . This vulnerability occurs because objects are reused after they have been released. A malicious actor who has already obtained System privilege could exploit this to increase their privileges ...