CVE-2026-20716
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Improper access control in some Intel processors in the user application layer may allow an escalation of privilege. The attack requires an authenticated user, high complexity, and special internal knowledge, but no user interaction. The vulnerability impacts confidentiality and integrity (high), with no impact on availability.
Risk Assessment
An attacker with local access and authentication may gain elevated privileges, potentially leading to confidentiality and integrity breaches. However, the attack requires high complexity.
Recommendation
It is recommended to update Intel processor microcode to the latest version. Also monitor vendor advisories for this vulnerability.
Original NVD description (English source)
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.