CVE-2026-20587
Medium · 6.7CVSS
6.7
EPSS
—
Published
Oct 5, 2026
CISA due date
—
The record
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119086 Missing queue-set type validation in the queue-set selection system call in… CWE-843
- CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-88090 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration… CWE-843
- CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-114598 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length… CWE-843
- CVE-2026-112659 A type confusion issue was addressed with improved memory handling. CWE-843