CVE-2026-20473

A memory corruption vulnerability exists in Microsoft Display due to a use after free condition. This flaw allows for local escalation of privilege if an attacker has already obtained System privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS110...

CVE-2026-20474

A race condition in the display component can lead to a local escalation of privilege . This vulnerability could be exploited by a malicious actor who has already obtained System privilege to further escalate their permissions. The exploit does not require user interaction. Remediation is availab...

CVE-2026-20475

A vulnerability exists in the display component due to a missing bounds check , which can result in an out of bounds write . If a malicious actor has already obtained System privileges , this flaw could lead to a local escalation of privilege . Exploitation does not require user interaction. Reme...

CVE-2026-20488

A missing bounds check in the display component can lead to local information disclosure . An attacker with System privileges can exploit this vulnerability without requiring any user interaction. Remediation is available via Patch ID: ALPS11004276 (Issue ID: MSV-7757). Specific details regarding...

CVE-2026-20489

A vulnerability in the display component allows for local information disclosure due to an integer overflow . An attacker who has already obtained System privileges can exploit this flaw without requiring any user interaction. Remediation is available via Patch ID: ALPS11004274 (Issue ID: MSV-774...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20530

A vulnerability exists in the display component due to a missing bounds check , which can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this could facilitate a local escalation of privilege . Exploitation does not require user interaction. Remediati...