CVE-2026-20584: Medium severity vulnerability

Published Nov 2, 2026

Updated

In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need before exploiting this issue?

The attacker must already have System privilege on the affected device. Exploitation does not require user interaction.

What is the potential impact after exploitation?

The missing bounds check can cause memory corruption in USB-related code, with potential impact to confidentiality, integrity, and availability. The stated consequence is local escalation of privilege.

What identifiers should be used to track remediation?

Use Patch ID ALPS11411916 and Issue ID MSV-9746 when coordinating remediation or checking vendor patch status.

CVE-2026-20584: Medium severity vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need before exploiting this issue?

What is the potential impact after exploitation?

What identifiers should be used to track remediation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need before exploiting this issue?

What is the potential impact after exploitation?

What identifiers should be used to track remediation?