{"id":"CVE-2026-20516","aliases":["EUVD-2026-72198","GHSA-r6mc-p7fv-v7wh"],"status":"published","title":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This...","description":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00134,"percentile":0.02981,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-926"],"published":"2026-09-07T01:57:20Z","modified":"2026-09-22T03:16:56Z","exploits":[{"source":"pocgithub","id":"Dingo97/CVE-2026-20516","title":"Dingo97/CVE-2026-20516","date":"2026-09-11","url":"https://github.com/Dingo97/CVE-2026-20516"}],"products":[{"vendor":"mediatek, inc.","product":"mediatek chipset"}],"references":[{"url":"https://www.mediatek.com/product-security-bulletin/September-2026"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20516"},{"url":"https://github.com/advisories/GHSA-r6mc-p7fv-v7wh"}],"sources":{"cve":[{"id":"CVE-2026-20516","description":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.","status":"published","published":"2026-09-07T01:57:20.217Z","modified":"2026-09-22T02:58:20.826Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-926"],"updated_at":"2026-11-02T13:35:33.380441Z"}],"euvd":[{"id":"EUVD-2026-72198","description":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.","status":"published","published":"2026-09-07T01:57:20Z","modified":"2026-09-22T02:58:20Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:28:03.79222Z"}],"ghsa":[{"id":"GHSA-r6mc-p7fv-v7wh","title":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This...","description":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.","status":"published","published":"2026-09-07T03:30:22Z","modified":"2026-09-07T12:31:31Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-926"],"updated_at":"2026-11-02T15:11:26.557204Z"}],"nvd":[{"id":"CVE-2026-20516","description":"In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.","status":"published","published":"2026-09-07T02:17:20.36Z","modified":"2026-09-22T03:16:56.33Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-926"],"updated_at":"2026-11-02T14:12:44.082631Z"}]}}