CVE-2026-20498

CVE-2026-20498 affects the geniezone component. The issue is a missing permission check that can allow local privilege escalation if an attacker already has System privileges. Exploitation reportedly does not require user interaction. A patch/workaround is identified as Patch ID: ALPS10900493 (MS...

CVE-2026-20454

CVE-2026-20454 affects the geniezone component. The vulnerability is an out-of-bounds write caused by a race condition that could allow local escalation of privilege if an attacker already has System privileges. No user interaction is required. A patch is referenced: ALPS10873936 (MSV-6786). The ...

CVE-2026-20455

In geniezone, CVE-2026-20455 is an out-of-bounds write caused by a missing bounds check, leading to local escalation of privilege for an attacker who already has System privileges. Exploitation details are not publicly provided in the connected documents; the description notes no user interaction...

CVE-2026-20453

CVE-2026-20453 affects geniezone with a possible out-of-bounds write caused by a missing bounds check. The issue could enable local privilege escalation for an actor who already has System privileges, with no user interaction required. Patch ALPS10886526 (MSV-6791) is referenced as a fix. Exploit...

CVE-2026-20481

CVE-2026-20481 affects the geniezone component. It describes an out-of-bounds write caused by a missing bounds check, allowing local escalation of privilege if the attacker already has System privileges. No user interaction is required. Patch ID: ALPS10965373; Issue ID: MSV-6935. Available connec...

CVE-2026-20475

CVE-2026-20475 describes a local escalation of privilege via an out-of-bounds write in display logic caused by a missing bounds check. Exploitation requires no user interaction and can occur if the attacker already has System privileges. A patch is available (Patch ID ALPS11004276; Issue ID MSV-7...

CVE-2026-20488

The CVE-2026-20488 entry describes a vulnerability in a display component where a missing bounds check can lead to local information disclosure if an attacker already has System privileges. No user interaction is required. A patch identified as ALPS11004276 (Issue MSV-7757) is available. The CVSS...

CVE-2026-20496

CVE-2026-20496 affects the geniezone component with an out-of-bounds read caused by a missing bounds check. If an attacker already has System privileges, this can lead to local information disclosure without user interaction. Patch ALPS11036877 (MSV-7132) is referenced as the remedy. The provided...

CVE-2026-20477

CVE-2026-20477 describes a local privilege escalation flaw where an out-of-bounds write occurs due to a missing bounds check in display code. Successful exploitation could grant SYSTEM-level privileges without user interaction. The vulnerability is associated with Patch ID ALPS11009963 and Issue ...

CVE-2026-20447

Technical details are not publicly available in the provided documents. Monitor for updates from referenced sources (geniezone, patch ALPS10724073, MSV-6296) for affected components, impact, and remediation.

CVE-2026-20473

CVE-2026-20473 involves a memory corruption vulnerability (use-after-free) described as enabling local privilege escalation if an attacker already has System privileges. The issue is triggered in display logic and does not require user interaction for exploitation, with local access as the attack...

CVE-2026-20489

Technical details (affected product/vendor/component/version/root cause) are not publicly provided in the supplied documents. The CVE describes an information-disclosure issue from an integer overflow with a patch ID ALPS11004274; monitor for updates.

CVE-2026-20474

Technical details about CVE-2026-20474 (affected products, versions, root cause) are not publicly available in the provided documents. Monitor for updates and forthcoming advisories from vendors and CVE databases.

CVE-2026-20486

In imgsensor, a local escalation of privilege could occur due to incorrect error handling causing an application crash when a System-privilege context is already held. The advisory notes no user interaction is required for exploitation. The publicly referenced fix is Patch ID ALPS11012302 (Issue ...

CVE-2026-20451

CVE-2026-20451 affects the slbc component. An out-of-bounds write caused by type confusion could enable local privilege escalation to SYSTEM without user interaction. Patch ALPS10828685 (MSV-6504) addresses the issue. Exploitation details are not provided. CVSSv3.1 metrics: AV:L/AC:L/PR:H/UI:N/S:...

CVE-2026-20448

In geniezone, CVE-2026-20448 is a local privilege-escalation vulnerability caused by a missing permission check. It could allow a user with System privileges to escalate further without user interaction. Patch ALPS10708513 (Issue MSV-6281) is referenced; no exploit details are provided in the doc...