CVE-2026-20463
Full vulnerability record from the local CVENow database.
Description
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309.
Severity
MEDIUM
CVSS score
6.7
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2026-07-01 04:17:15.553000
Last modified
2026-10-25 17:10:00.197000
View original CVE JSON
{
"id": "CVE-2026-20463",
"sourceIdentifier": "[email protected]",
"published": "2026-07-01T04:17:15.553",
"lastModified": "2026-10-25T17:10:00.197",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309."
},
{
"lang": "es",
"value": "En el módem, existe una posible escalada de privilegios debido a una omisión de permisos. Esto podría llevar a una escalada de privilegios local si un actor malicioso ya ha obtenido el privilegio de Sistema. No se necesita interacción del usuario para la explotación. ID del parche: MOLY01716533; ID del problema: MSV-6309."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "MediaTek, Inc.",
"product": "MediaTek chipset",
"defaultStatus": "unaffected",
"versions": [
{
"version": "MT2716",
"status": "affected"
},
{
"version": "MT2735",
"status": "affected"
},
{
"version": "MT2737",
"status": "affected"
},
{
"version": "MT6739",
"status": "affected"
},
{
"version": "MT6761",
"status": "affected"
},
{
"version": "MT6762",
"status": "affected"
},
{
"version": "MT6763",
"status": "affected"
},
{
"version": "MT6765",
"status": "affected"
},
{
"version": "MT6767",
"status": "affected"
},
{
"version": "MT6768",
"status": "affected"
},
{
"version": "MT6769",
"status": "affected"
},
{
"version": "MT6771",
"status": "affected"
},
{
"version": "MT6779",
"status": "affected"
},
{
"version": "MT6781",
"status": "affected"
},
{
"version": "MT6783",
"status": "affected"
},
{
"version": "MT6785",
"status": "affected"
},
{
"version": "MT6789",
"status": "affected"
},
{
"version": "MT6813",
"status": "affected"
},
{
"version": "MT6833",
"status": "affected"
},
{
"version": "MT6835",
"status": "affected"
},
{
"version": "MT6853",
"status": "affected"
},
{
"version": "MT6855",
"status": "affected"
},
{
"version": "MT6858",
"status": "affected"
},
{
"version": "MT6873",
"status": "affected"
},
{
"version": "MT6875",
"status": "affected"
},
{
"version": "MT6877",
"status": "affected"
},
{
"version": "MT6878",
"status": "affected"
},
{
"version": "MT6879",
"status": "affected"
},
{
"version": "MT6880",
"status": "affected"
},
{
"version": "MT6881",
"status": "affected"
},
{
"version": "MT6883",
"status": "affected"
},
{
"version": "MT6885",
"status": "affected"
},
{
"version": "MT6886",
"status": "affected"
},
{
"version": "MT6889",
"status": "affected"
},
{
"version": "MT6890",
"status": "affected"
},
{
"version": "MT6891",
"status": "affected"
},
{
"version": "MT6893",
"status": "affected"
},
{
"version": "MT6895",
"status": "affected"
},
{
"version": "MT6896",
"status": "affected"
},
{
"version": "MT6897",
"status": "affected"
},
{
"version": "MT6899",
"status": "affected"
},
{
"version": "MT6980",
"status": "affected"
},
{
"version": "MT6982",
"status": "affected"
},
{
"version": "MT6983",
"status": "affected"
},
{
"version": "MT6985",
"status": "affected"
},
{
"version": "MT6986",
"status": "affected"
},
{
"version": "MT6986D",
"status": "affected"
},
{
"version": "MT6988",
"status": "affected"
},
{
"version": "MT6989",
"status": "affected"
},
{
"version": "MT6990",
"status": "affected"
},
{
"version": "MT6991",
"status": "affected"
},
{
"version": "MT6993",
"status": "affected"
},
{
"version": "MT8666",
"status": "affected"
},
{
"version": "MT8667",
"status": "affected"
},
{
"version": "MT8668",
"status": "affected"
},
{
"version": "MT8673",
"status": "affected"
},
{
"version": "MT8675",
"status": "affected"
},
{
"version": "MT8676",
"status": "affected"
},
{
"version": "MT8678",
"status": "affected"
},
{
"version": "MT8755",
"status": "affected"
},
{
"version": "MT8765",
"status": "affected"
},
{
"version": "MT8766",
"status": "affected"
},
{
"version": "MT8766R",
"status": "affected"
},
{
"version": "MT8768",
"status": "affected"
},
{
"version": "MT8771",
"status": "affected"
},
{
"version": "MT8775",
"status": "affected"
},
{
"version": "MT8781",
"status": "affected"
},
{
"version": "MT8786",
"status": "affected"
},
{
"version": "MT8788",
"status": "affected"
},
{
"version": "MT8788E",
"status": "affected"
},
{
"version": "MT8789",
"status": "affected"
},
{
"version": "MT8791",
"status": "affected"
},
{
"version": "MT8791T",
"status": "affected"
},
{
"version": "MT8792",
"status": "affected"
},
{
"version": "MT8793",
"status": "affected"
},
{
"version": "MT8795T",
"status": "affected"
},
{
"version": "MT8796",
"status": "affected"
},
{
"version": "MT8797",
"status": "affected"
},
{
"version": "MT8798",
"status": "affected"
},
{
"version": "MT8863",
"status": "affected"
},
{
"version": "MT8873",
"status": "affected"
},
{
"version": "MT8883",
"status": "affected"
},
{
"version": "MT8893",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-07-01T00:00:00+00:00",
"id": "CVE-2026-20463",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-280"
}
]
}
],
"references": [
{
"url": "https://corp.mediatek.com/product-security-bulletin/July-2026",
"source": "[email protected]"
}
]
}