Vulnerability intel
Search the latest CVE vulnerabilities with severity scores, CVSS ratings, affected products, impact analysis, and remediation guidance.
No CVEs ingested yet. The scraper will populate this list shortly.
CVE-2026-20550 is an out‑of‑bounds write in GNSS firmware that can cause a local denial of service. The flaw requires user interaction and does not grant elevated privileges. It affects GNSS receivers and related software components.
View analysisCVE-2026-20551 is a medium‑severity vulnerability in GNSS firmware that allows an out‑of‑bounds write due to a missing bounds check. The flaw can cause a local denial‑of‑service (DoS) without privilege escalation, but requires user interaction to trigger. It is relevant to devices that rely on GNSS for positioning, such as smartphones, automotive systems, and IoT devices.
View analysisCVE-2026-20552 is an out-of-bounds write vulnerability in the ccci component of MediaTek firmware. It can cause a remote denial-of-service when a user interacts with the affected device. The flaw requires no elevated privileges and is mitigated by applying the vendor patch.
View analysisCVE-2026-20553 is an out‑of‑bounds write flaw in DA firmware that can be exploited locally without user interaction. The vulnerability allows an attacker with physical access to elevate privileges on the device. It is rated medium severity with a CVSS v3 score of 6.8.
View analysisCVE-2026-20554 is a critical flaw in modem firmware that can cause a system crash due to a missing bounds check. The vulnerability allows remote privilege escalation when a user equipment (UE) connects to a rogue base station, requiring user interaction. It can lead to loss of confidentiality, integrity, and availability of the device.
View analysisCVE-2026-20555 is an out‑of‑bounds read in modem firmware that can cause a remote denial of service when a user equipment (UE) connects to a rogue base station. The flaw requires no user interaction or elevated privileges and can be triggered by an attacker controlling the base station. Affected devices can become unresponsive, disrupting connectivity for users.
View analysisCVE-2026-20556 is a critical out‑of‑bounds write in modem firmware that allows remote privilege escalation when a user equipment (UE) connects to a rogue base station. The flaw requires no user interaction and can be exploited by an attacker controlling a base station. It poses a serious risk to network integrity and confidentiality.
View analysisA critical out-of-bounds write in Modem firmware allows remote privilege escalation when a UE connects to a rogue base station. The flaw can be exploited without user interaction, enabling attackers to gain elevated privileges on the device.
View analysisCVE-2026-20558 is a local privilege escalation vulnerability in the GPU pdma component caused by a use‑after‑free bug. It allows an attacker with local access to gain higher privileges on the affected system without additional execution privileges. The flaw exists in the Windows GPU driver and requires no user interaction.
View analysisCVE-2026-20559 is a use‑after‑free memory corruption in GPU pdma that can lead to local privilege escalation. The flaw exists in the GPU driver and does not require user interaction. It allows an attacker with user execution privileges to gain higher privileges on the host.
View analysisCVE-2026-20560 causes a modem crash due to improper input validation when a UE connects to a rogue base station. The flaw can trigger a remote denial‑of‑service without user interaction or elevated privileges. It affects devices that rely on the vulnerable modem firmware.
View analysisIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01750090; Issue ID: MSV-8908.
View analysisIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775984; Issue ID: MSV-8907.
View analysisIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01777997; Issue ID: MSV-8905.
View analysisIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01780439; Issue ID: MSV-8901.
View analysisIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.
View analysisIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: MOLY01923663 / ALPS11315955; Issue ID: MSV-10866.
View analysisIn afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-10004.
View analysisAFE component suffers a use-after-free that can crash the system and allow local privilege escalation without user interaction. The flaw is high severity and can affect any system running the affected component. Defenders should apply the vendor patch promptly.
View analysisCVE-2026-20569 is a use‑after‑free memory corruption in Microsoft Windows ADSP that can lead to local privilege escalation if an attacker already has System privileges. The flaw does not require user interaction and can be triggered by a malicious actor with sufficient access. It is a high‑severity vulnerability with a CVSS v3 score of 7.8.
View analysisLoading more…
End of results
