CVE-2026-20714
HighSummary
CVE-2026-20714 is a vulnerability related to out-of-bounds write in some Intel(R) QAT software drivers for Windows before version 1.13. It may allow privilege escalation by an unprivileged attacker with authenticated access.
Risk Assessment
The risk to the organization involves the potential for privilege escalation, which could lead to serious breaches of confidentiality, integrity, and availability of the system. The attack can be executed locally without user interaction.
Recommendation
It is recommended to update Intel(R) QAT drivers to version 1.13 or later to mitigate this vulnerability. Additionally, monitoring access to systems is advised to detect potential privilege escalation attempts.
Other vulnerabilities in Intel(R) QAT software drivers for Windows
Original NVD description (English source)
Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.