Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (15 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-20521 2 Mediatek, Mediatek, Inc. 97 Mt2718, Mt2718 Firmware, Mt6768 and 94 more 2026-10-08 8.4 High
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20522 2 Mediatek, Mediatek, Inc. 17 Mt6881, Mt6881 Firmware, Mt6993 and 14 more 2026-10-08 8.4 High
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
CVE-2026-20523 2 Mediatek, Mediatek, Inc. 19 Mt6881, Mt6881 Firmware, Mt6993 and 16 more 2026-10-08 8.4 High
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
CVE-2026-20525 1 Mediatek 45 Mediatek Chipset, Mt2716, Mt2716 Firmware and 42 more 2026-10-08 5.3 Medium
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.
CVE-2026-20526 2 Mediatek, Mediatek, Inc. 111 Mt2716, Mt2716 Firmware, Mt2735 and 108 more 2026-10-08 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01898195; Issue ID: MSV-8906.
CVE-2026-20527 2 Mediatek, Mediatek, Inc. 111 Mt2716, Mt2716 Firmware, Mt2735 and 108 more 2026-10-08 5.3 Medium
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.
CVE-2026-20519 2 Mediatek, Mediatek, Inc. 115 Mt2716, Mt2716 Firmware, Mt2735 and 112 more 2026-10-08 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.
CVE-2026-20520 1 Mediatek 115 Mediatek Chipset, Mt2716, Mt2716 Firmware and 112 more 2026-10-08 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.
CVE-2026-20543 2 Mediatek, Mediatek, Inc. 167 Mt2716, Mt2716 Firmware, Mt2735 and 164 more 2026-10-08 5.5 Medium
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.
CVE-2026-20503 2 Mediatek, Mediatek, Inc. 115 Mt2716, Mt2716 Firmware, Mt2735 and 112 more 2026-09-09 5.3 Medium
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
CVE-2026-20502 2 Mediatek, Mediatek, Inc. 107 Mt2718, Mt2718 Firmware, Mt6580 and 104 more 2026-09-09 8.4 High
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501 2 Mediatek, Mediatek, Inc. 107 Mt2718, Mt2718 Firmware, Mt6580 and 104 more 2026-09-09 8.4 High
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20500 1 Mediatek 45 Mediatek Chipset, Mt2716, Mt2716 Firmware and 42 more 2026-09-09 5.5 Medium
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
CVE-2026-20411 2 Google, Mediatek 26 Android, Mt6781, Mt6878 and 23 more 2026-04-16 7.8 High
In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5737.
CVE-2026-20412 2 Google, Mediatek 25 Android, Mt6878, Mt6879 and 22 more 2026-04-16 7.8 High
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5733.