CVE-2026-20418CWE-787

In Thread, there is a possible out of bounds write due to a missing bounds check

Critical · published February 2, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

🚨 A sneaky out-of-bounds write in Thread could let attackers escalate their privileges without breaking a sweat! 🔥 Think of this as having a faulty elevator in a tall building — it could allow unauthorized access to upper floors without any keycard! If exploited, an attacker could gain elevated privileges and control over sensitive systems, leading to data theft or unauthorized actions that could compromise the entire network. This is absolutely devastating, as it opens the door to significant breaches without any user interaction!

Put simply

Think of this as having a faulty elevator in a tall building — it could allow unauthorized access to upper floors without any keycard! This vulnerability allows for an out-of-bounds write due to a missing bounds check in Thread, which could enable remote privilege escalation with no extra execution privileges required.

What to do

If exploited, an attacker could gain elevated privileges and control over sensitive systems, leading to data theft or unauthorized actions that could compromise the entire network. This is absolutely devastating, as it opens the door to significant breaches without any user interaction! Patch this vulnerability immediately using Patch ID WCNCR00465153. It's crucial to check and apply this update across all affected systems to ensure you're protected from potential exploitation! You've got this! Secure your systems now, and you'll be a hero in the fight against cyber threats! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-02T08:15Z
EPSS history
Timeline
  • 02 FEB 08:15Z
    In Thread, there is a possible out of bounds write due to a missing bounds check
    cvelistv5