CVE-2026-20544

MediumCVSS 6.8/10Last modified Oct 9, 2026

Description

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Oct 5, 2026
Last modified: Oct 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-20557.5A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the component CVE-2026-20567.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of t CVE-2026-20579.8A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /lo CVE-2026-205796.7In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious acto CVE-2026-20589.8A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown fun CVE-2026-205868.8In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no ad CVE-2026-205876.7In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious CVE-2026-205886.7In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a ma CVE-2026-205896.7In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious acto CVE-2026-20599.8A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /e CVE-2026-20609.8A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functional CVE-2026-206013.3A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keyst