CVE-2026-20488

The CVE-2026-20488 entry describes a vulnerability in a display component where a missing bounds check can lead to local information disclosure if an attacker already has System privileges. No user interaction is required. A patch identified as ALPS11004276 (Issue MSV-7757) is available. The CVSS...

CVE-2026-20475

CVE-2026-20475 describes a local escalation of privilege via an out-of-bounds write in display logic caused by a missing bounds check. Exploitation requires no user interaction and can occur if the attacker already has System privileges. A patch is available (Patch ID ALPS11004276; Issue ID MSV-7...

CVE-2026-20447

Technical details are not publicly available in the provided documents. Monitor for updates from referenced sources (geniezone, patch ALPS10724073, MSV-6296) for affected components, impact, and remediation.

CVE-2026-20473

CVE-2026-20473 involves a memory corruption vulnerability (use-after-free) described as enabling local privilege escalation if an attacker already has System privileges. The issue is triggered in display logic and does not require user interaction for exploitation, with local access as the attack...

CVE-2026-20489

Technical details (affected product/vendor/component/version/root cause) are not publicly provided in the supplied documents. The CVE describes an information-disclosure issue from an integer overflow with a patch ID ALPS11004274; monitor for updates.

CVE-2026-20474

Technical details about CVE-2026-20474 (affected products, versions, root cause) are not publicly available in the provided documents. Monitor for updates and forthcoming advisories from vendors and CVE databases.

CVE-2026-20451

CVE-2026-20451 affects the slbc component. An out-of-bounds write caused by type confusion could enable local privilege escalation to SYSTEM without user interaction. Patch ALPS10828685 (MSV-6504) addresses the issue. Exploitation details are not provided. CVSSv3.1 metrics: AV:L/AC:L/PR:H/UI:N/S:...

CVE-2026-20448

In geniezone, CVE-2026-20448 is a local privilege-escalation vulnerability caused by a missing permission check. It could allow a user with System privileges to escalate further without user interaction. Patch ALPS10708513 (Issue MSV-6281) is referenced; no exploit details are provided in the doc...