CVE-2026-20497

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor with existing System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch IDs ALPS10965...

CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20454

A race condition within the geniezone mechanism in MediaTek Chipsets can lead to an out of bounds write . If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve a local escalation of privilege . Exploitation does not require user interaction. R...

CVE-2026-20453

MediaTek Chipsets are susceptible to an out-of-bounds write vulnerability in the geniezone component caused by a missing bounds check. This security flaw could enable a local escalation of privilege if an attacker already possesses System privileges. Exploitation does not require user interaction...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains a security vulnerability caused by a missing bounds check , which allows for an out-of-bounds write . If a malicious actor has already obtained System privilege , they can exploit this flaw to achieve local escalation of privilege . Exploitati...

CVE-2026-20498

The geniezone software is vulnerable to a local escalation of privilege caused by a missing permission check . This vulnerability allows an attacker who has already obtained System privilege to escalate their privileges further without requiring user interaction. To remediate this issue, users sh...

CVE-2026-20481

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ...

CVE-2026-20473

A memory corruption vulnerability exists in Microsoft Display due to a use after free condition. This flaw allows for local escalation of privilege if an attacker has already obtained System privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS110...

CVE-2026-20474

A race condition in the display component can lead to a local escalation of privilege . This vulnerability could be exploited by a malicious actor who has already obtained System privilege to further escalate their permissions. The exploit does not require user interaction. Remediation is availab...

CVE-2026-20475

A vulnerability exists in the display component due to a missing bounds check , which can result in an out of bounds write . If a malicious actor has already obtained System privileges , this flaw could lead to a local escalation of privilege . Exploitation does not require user interaction. Reme...

CVE-2026-20488

A missing bounds check in the display component can lead to local information disclosure . An attacker with System privileges can exploit this vulnerability without requiring any user interaction. Remediation is available via Patch ID: ALPS11004276 (Issue ID: MSV-7757). Specific details regarding...

CVE-2026-20496

The geniezone component is vulnerable to an out of bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this to cause local information disclosure . No user interaction is required for exploitation. Remediation is available via Patch ID: ALP...

CVE-2026-20447

The geniezone component, associated with MediaTek Chipsets , contains a buffer error vulnerability caused by a missing bounds check . This flaw can lead to a local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not require user interaction. ...

CVE-2026-20489

A vulnerability in the display component allows for local information disclosure due to an integer overflow . An attacker who has already obtained System privileges can exploit this flaw without requiring any user interaction. Remediation is available via Patch ID: ALPS11004274 (Issue ID: MSV-774...

CVE-2026-20451

A type confusion vulnerability in slbc (associated with MediaTek Chipsets ) allows for an out-of-bounds write . This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege . Exploitation does not require user interaction. Remediatio...

CVE-2026-20483

A vulnerability exists in Telephony due to a missing permission check , which can lead to a local escalation of privilege . This flaw allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. Remediation information is provided via Patch...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...