Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (12 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-20573 2 Mediatek, Mediatek, Inc. 72 Mediatek Chipset, Mt2735, Mt2735 Firmware and 69 more 2026-11-12 6.7 Medium
In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431412; Issue ID: MSV-9923.
CVE-2026-20574 2 Mediatek, Mediatek, Inc. 72 Mediatek Chipset, Mt2735, Mt2735 Firmware and 69 more 2026-11-12 6.7 Medium
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.
CVE-2026-20575 2 Mediatek, Mediatek, Inc. 58 Mediatek Chipset, Mt6739, Mt6739 Firmware and 55 more 2026-11-12 6.7 Medium
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921.
CVE-2026-20576 2 Mediatek, Mediatek, Inc. 30 Mediatek Chipset, Mt6789, Mt6789 Firmware and 27 more 2026-11-12 6.7 Medium
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.
CVE-2026-20583 2 Mediatek, Mediatek, Inc. 72 Mediatek Chipset, Mt6739, Mt6739 Firmware and 69 more 2026-11-12 4.4 Medium
In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.
CVE-2026-20584 2 Mediatek, Mediatek, Inc. 60 Mediatek Chipset, Mt6739, Mt6739 Firmware and 57 more 2026-11-12 6.7 Medium
In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746.
CVE-2026-20590 2 Mediatek, Mediatek, Inc. 64 Mediatek Chipset, Mt6739, Mt6739 Firmware and 61 more 2026-11-12 4.4 Medium
In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11410704; Issue ID: MSV-9574.
CVE-2026-20593 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 5.3 Medium
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01707455; Issue ID: MSV-9503.
CVE-2026-20595 2 Mediatek, Mediatek, Inc. 96 Mediatek Chipset, Mt6739, Mt6739 Firmware and 93 more 2026-11-12 6.7 Medium
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001.
CVE-2026-20596 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 5.3 Medium
In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758225; Issue ID: MSV-8910.
CVE-2026-20597 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 5.3 Medium
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758223; Issue ID: MSV-8909.
CVE-2026-20599 2 Mediatek, Mediatek, Inc. 156 Mediatek Chipset, Mt2716, Mt2716 Firmware and 153 more 2026-11-12 6.7 Medium
In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01790985; Issue ID: MSV-8148.