CVE-2026-20508
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
Risk Assessment
Risk of privilege escalation, potentially allowing an attacker full control over the system.
Recommendation
Apply the vendor patch ALPS11165543 (MSV-9012).
Other vulnerabilities in Power HAL
Original NVD description (English source)
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS