CVE-2026-20574: Use After Free

Published Nov 2, 2026

Updated

In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already have System privilege on the affected device. Exploitation does not require user interaction.

What is the potential impact after exploitation?

The use-after-free condition can cause memory corruption and may allow local escalation of privilege. The reported impacts include confidentiality, integrity, and availability.

Is a patch identifier available for remediation tracking?

Yes. The vendor identifies the fix as Patch ID ALPS11431400 and Issue ID MSV-9922.

CVE-2026-20574: Use After Free

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact after exploitation?

Is a patch identifier available for remediation tracking?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact after exploitation?

Is a patch identifier available for remediation tracking?