CVE-2026-20448

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation.

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In geniezone, a missing permission check allows escalation of privilege. A local attacker with System privileges can escalate further without user interaction.

In geniezone, a missing bounds check allows out-of-bounds write. A local attacker with System privileges can escalate privileges without user interaction.

In geniezone, a missing bounds check allows out-of-bounds read. A local attacker with System privileges can access sensitive information without user interaction.

In geniezone, a missing bounds check could lead to an out-of-bounds write, allowing local escalation of privilege if the attacker already has System privilege. No user interaction is needed.

In geniezone, a missing bounds check allows out-of-bounds write, potentially leading to local privilege escalation if the attacker already has System privilege. User interaction is not required.

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.

In geniezone, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.