CVE-2026-20522

HighCVSS 8.4

Published: 05/10/2026(UTC)Updated: 08/10/2026(UTC)Translated: 05/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

Risk of local privilege escalation, potentially allowing attacker to gain elevated privileges on the system.

Recommendation

Apply patch ALPS11249050 (Issue ID: MSV-9172).

Other vulnerabilities in neuropilot

CVE-2026-20523High
In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

Original NVD description (English source)

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS