CVE-2026-20575
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor h
CVSS
6.7
Medio
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 2 nov 2026 · Última mod.: 3 nov 2026 · CWE-843
Sin historial EPSS suficiente todavía.
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-205746.7 MED—
——0In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.10hCVE-2026-205716.7 MED—
——0In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11434319; Issue ID: MSV-9925.10hCVE-2026-1190866.5 MED4.6%
——1Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged memory across the MPU isolation boundary.
To remediate this issue, users should upgrade to FreeRTOS-Kernel V11.3.3, rebuild, and reflash affected firmware. Builds that do not enable queue sets are not affected.4dCVE-2026-961877.4 ALT43.8%
——13Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.4dCVE-2026-880905.4 MED24.7%
——7Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.4dCVE-2026-1185108.8 ALT20.8%
——6A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to decide which documents a request may see or act on, a user with basic privileges may be served, may change, or may remove documents that the check was intended to withhold. The failure is silent and produces no error.5d