CVE-2026-20465: Heap-based Buffer Overflow

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...

CVE-2026-48323: Improper Neutralization of Special Elements Used in a Template Engine

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

PT-2026-67179

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...

PT-2026-67157

Name of the Vulnerable Software and Affected Versions trusted mem affected versions not specified Description Improper input validation in trusted mem allows for a possible local escalation of privilege. This issue requires user interaction and can be exploited if a malicious actor has already...

PT-2026-67172

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004...

PT-2026-67544

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains an Eval Injection issue, which occurs when directives in dynamically evaluated code are not properly neutralized. This allows a...

PT-2026-67153

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description A missing bounds check in the wlan AP driver allows for an out-of-bounds write. This condition can be exploited by a remote attacker in proximal or adjacent network positions to achiev...

PT-2026-67166

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 Note: For MT6880, MT6890, MT6988, MT6990 / AUTO00851293...

PT-2026-67169

Name of the Vulnerable Software and Affected Versions geniezone affected versions not specified Description A missing bounds check in geniezone allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local escalati...

PT-2026-67165

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This could lead to local...

PT-2026-67546

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains an SQL Injection flaw, which occurs when special elements in an SQL command are not properly neutralized. This allows a low-privileged...

PT-2026-67152

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An integer overflow in the hevc decoder can lead to an out-of-bounds write. This condition may allow a remote actor who has already obtained System privilege to...

PT-2026-67162

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A race condition in display allows for a local escalation of privilege. This occurs when a malicious actor who has already obtained System privilege exploits the timing of events to gain...

PT-2026-67156

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A confused deputy issue allows for a local escalation of privilege. This occurs when a malicious actor who has already obtained System privilege can leverage the system to gain further...

PT-2026-67161

Name of the Vulnerable Software and Affected Versions Microsoft Display affected versions not specified Description A memory corruption issue exists in the display component caused by a use after free condition. This occurs when a program continues to use a pointer after it has been freed, which...

PT-2026-67182

Name of the Vulnerable Software and Affected Versions Bluetooth driver affected versions not specified Description A missing permission check in the Bluetooth driver allows for a permission bypass. This flaw enables local escalation of privilege, requiring only user execution privileges...

PT-2026-67184

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

PT-2026-67173

Name of the Vulnerable Software and Affected Versions HFRP affected versions not specified Description An out-of-bounds write occurs in HFRP due to a missing bounds check. This flaw allows for local escalation of privilege if a malicious actor has already obtained System privilege. Exploitation...

PT-2026-67164

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981532; Issue ID: MSV-7660...

PT-2026-67550

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains a violation of secure design principles that allows for a security feature bypass. An attacker can exploit this issue to circumvent...