Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (46 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-20503 2 Mediatek, Mediatek, Inc. 115 Mt2716, Mt2716 Firmware, Mt2735 and 112 more 2026-09-09 5.3 Medium
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
CVE-2026-20502 2 Mediatek, Mediatek, Inc. 107 Mt2718, Mt2718 Firmware, Mt6580 and 104 more 2026-09-09 8.4 High
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501 2 Mediatek, Mediatek, Inc. 107 Mt2718, Mt2718 Firmware, Mt6580 and 104 more 2026-09-09 8.4 High
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20500 1 Mediatek 45 Mediatek Chipset, Mt2716, Mt2716 Firmware and 42 more 2026-09-09 5.5 Medium
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
CVE-2026-20474 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 6 Medium
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.
CVE-2026-20475 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 6 Medium
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.
CVE-2026-20477 2 Mediatek, Mediatek, Inc. 21 Mt6991, Mt6991 Firmware, Mt6993 and 18 more 2026-08-19 6 Medium
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.
CVE-2026-20483 2 Mediatek, Mediatek, Inc. 71 Mt6739, Mt6739 Firmware, Mt6761 and 68 more 2026-08-19 7.7 High
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.
CVE-2026-20484 2 Mediatek, Mediatek, Inc. 79 Mt6739, Mt6739 Firmware, Mt6761 and 76 more 2026-08-19 4.4 Medium
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.
CVE-2026-20485 2 Mediatek, Mediatek, Inc. 3 Mt6993, Mt6993 Firmware, Mediatek Chipset 2026-08-19 6 Medium
In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.
CVE-2026-20486 1 Mediatek 23 Mediatek Chipset, Mt2718, Mt2718 Firmware and 20 more 2026-08-19 6.7 Medium
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.
CVE-2026-20488 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 4.4 Medium
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
CVE-2026-20489 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 4.4 Medium
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.
CVE-2026-20473 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 6 Medium
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.
CVE-2026-20447 2 Mediatek, Mediatek, Inc. 35 Mt6768, Mt6768 Firmware, Mt6789 and 32 more 2026-05-07 6.7 Medium
In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.
CVE-2026-20448 2 Mediatek, Mediatek, Inc. 45 Mt6765, Mt6765 Firmware, Mt6768 and 42 more 2026-05-07 6.7 Medium
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.
CVE-2026-20449 2 Mediatek, Mediatek, Inc. 137 Mt2735, Mt2735 Firmware, Mt2737 and 134 more 2026-05-07 6.5 Medium
In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.
CVE-2026-20450 2 Mediatek, Mediatek, Inc. 103 Mt2735, Mt2735 Firmware, Mt2737 and 100 more 2026-05-07 6.5 Medium
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
CVE-2026-20406 1 Mediatek 56 Mt2735, Mt2737, Mt6813 and 53 more 2026-04-18 6.5 Medium
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.
CVE-2026-20422 1 Mediatek 57 Mt2735, Mt2737, Mt6813 and 54 more 2026-04-16 6.5 Medium
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.