CVE-2026-20513
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure i
CVSS
4.4
Medium
EPSS
0.2%
p7
KEV
—
Exploit Today
2
0-100
Published: Sep 7, 2026 · Last modified: Sep 8, 2026 · CWE-35
0.2%EPSS · 30 days0.2%
2026-09-072026-09-09
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-853106.5 MED—
———import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.8hCVE-2026-211036.1 MED7.0%
——2Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.8hCVE-2026-21092—34.5%
——10Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.14hCVE-2026-599097.1 HIG1.9%
——1Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.23dCVE-2026-560893.3 LOW3.4%
——1Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.23dCVE-2026-281577.5 HIG30.3%
——9Subscriber Path Traversal in Do Lasso <= 358 versions.27d