CVE-2026-20510

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

EUVD-2026-72202

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20509

CVE-2026-20509 affects Power HAL in MediaTek devices, where a missing bounds check allows an out-of-bounds write , enabling a local attacker who already holds the System privilege to escalate further. No user interaction is required. The CVSS 3.1 score is 6.7 (Medium) with High impact to confiden...

EUVD-2026-72201

In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012...

CVE-2026-20508

CVE-2026-20508 affects the Power HAL component in MediaTek devices, where a type confusion flaw allows local privilege escalation. An attacker who already holds the System privilege can exploit this without user interaction to gain full confidentiality, integrity, and availability impact. The CVS...

EUVD-2026-72200

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125...

CVE-2026-20507

CVE-2026-20507 is a use-after-free vulnerability in the Audio HAL of MediaTek devices. The flaw enables local privilege escalation from the System privilege level, with no user interaction required. The CVSS 3.1 base score is 6.7 (MEDIUM) , reflecting the high privileges already needed for exploi...

EUVD-2026-72199

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126...

CVE-2026-20506

CVE-2026-20506 affects the Audio HAL component, where a use-after-free flaw can lead to local privilege escalation . An attacker must already hold the System privilege; no user interaction is required. The CNA-assigned CVSS 3.1 score is 6.7 (MEDIUM) , reflecting local attack vector, low complexit...

CVE-2026-81302

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product...

CVE-2026-66109

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-66109

A missing authorization vulnerability in SKYSEA Client View and SKYMEC IT Manager (Windows) allows a local attacker with low-level credentials to execute arbitrary code with SYSTEM privilege . The CVSS 3.0 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. No user interacti...

EUVD-2026-65308

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-66109

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager are affected by an incorrect default permissions issue on Windows. A local attacker with low-level access can exploit this flaw to execute arbitrary code with SYSTEM privilege , achieving full compromise of the host. The CNA (JPCERT/CC) assigned a CVSS v3....

Multiple vulnerabilities in NetKids iMark

Overview NetKids iMark provided by Integrated Systems Technologies, Inc. contains multiple vulnerabilities listed below: Uncontrolled search path element CWE-427 - CVE-2026-66344 Unquoted search path or element CWE-428 - CVE-2026-66839 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported...

EUVD-2026-52640

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

CVE-2026-15430 CVE-2026-15430

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

CVE-2026-20498

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765...