CVE-2026-20587

MediumCVSS 6.7

Published: 05/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 05/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

In the mtee component, there is a possible privilege escalation due to type confusion. This could lead to local privilege escalation if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

Risk Assessment

Risk of local privilege escalation, potentially allowing unauthorized access to system resources.

Recommendation

Apply patch ALPS11383899 (Issue ID: MSV-9608) as soon as possible.

Other vulnerabilities in mtee

CVE-2026-20588Medium
In the mtee component, there is a possible privilege escalation due to a missing bounds check. This could lead to local privilege escalation if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

Original NVD description (English source)

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS