CVE-2026-20583: Use After Free

Published Nov 2, 2026

Updated

In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

An attacker must already have System privilege on the affected device. The impact described is a local denial of service through a system crash, not confidentiality or integrity compromise.

Does exploitation require user interaction or network access?

No user interaction is needed. The vector is local, so the attacker needs code execution or access sufficient to operate with System privilege on the device.

What is the relevant remediation identifier?

The supplied patch identifier is ALPS11411916, and the associated issue identifier is MSV-9747.

CVE-2026-20583: Use After Free

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

Does exploitation require user interaction or network access?

What is the relevant remediation identifier?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

Does exploitation require user interaction or network access?

What is the relevant remediation identifier?