CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

EUVD-2026-52063

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759...

EUVD-2026-52062

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759...

CVE-2026-20473

CVE-2026-20473 involves a memory corruption vulnerability (use-after-free) described as enabling local privilege escalation if an attacker already has System privileges. The issue is triggered in display logic and does not require user interaction for exploitation, with local access as the attack...

EUVD-2026-52061

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

CVE-2026-20472

CVE-2026-20472 describes a vulnerability in the TFA component where an out-of-bounds write results from a missing bounds check. The issue could allow local denial of service if an attacker already has System privileges, with no user interaction required. A patch is available (Patch ID: ALPS109914...

CVE-2026-20472

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

CVE-2026-20471

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...

EUVD-2026-52060

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...

CVE-2026-20469

In trustedmem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533...

CVE-2026-20469

CVE-2026-20469 affects the trusted_mem path where improper input validation can lead to local privilege escalation if an attacker already has System privileges. Exploitation requires user interaction per the description. Patch AUTO00834868 (MSV-6533) is referenced as the remedy.

EUVD-2026-52059

In trustedmem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533...

CVE-2026-20468

In apusys, a local escalation of privilege via a confused deputy is possible if an attacker already has System privileges. This does not require user interaction. The CVE (CVE-2026-20468) lists a patch ID AUTO00833804 and Issue ID MSV-6741. CVSSv3.1 metrics indicate a Local attack vector, Low att...

EUVD-2026-52058

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741...

CVE-2026-20468

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741...

CVE-2026-20467

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767...

EUVD-2026-52057

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767...

CVE-2026-20467

CVE-2026-20467 affects the apusys component, where a missing bounds check can enable local privilege escalation for an attacker already with System privileges. The vulnerability does not require user interaction. The entry notes a patch identified as AUTO00837766 and Issue ID MSV-6767 as remediat...

CVE-2026-20466

CVE-2026-20466 : A heap buffer overflow in the secure boot flow may allow local privilege escalation with physical access and no user interaction. Affected platforms include MT2737 (AUTO00845351) and MT6880/MT6890/MT6990 (ALPS11072643); Issue MSV-6929. Patch guidance is provided in the MT securit...