CVE-2026-101183
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVSS
5.9
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 2, 2026 · Last modified: Nov 2, 2026 · CWE-416
Not enough EPSS history yet.
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletin/2026/10/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinlaptops/2026/10/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinvision/2026/10/
- consumer.huawei.comhttps://consumer.huawei.com/en/support/bulletinwearables/2026/10/
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1203377.3 HIG—
——0A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.9hCVE-2026-20591——
——0In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365075; Issue ID: MSV-9546.10hCVE-2026-20583——
——0In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.10hCVE-2026-20581——
——0In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411985; Issue ID: MSV-9750.10hCVE-2026-20580——
——0In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11412004; Issue ID: MSV-9752.10hCVE-2026-20570——
——0In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431474; Issue ID: MSV-9926.10h