CVE-2026-20727
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A null pointer dereference in Intel PROSet/Wireless WiFi software for Windows in the kernel layer may allow a denial of service. An unprivileged software adversary with an unauthenticated user can exploit the vulnerability with low complexity, no user interaction, via adjacent access. The vulnerability impacts system availability (high), with no impact on confidentiality or integrity.
Risk Assessment
It is possible to cause system crashes or service hangs, potentially leading to unavailability of critical applications. The attack does not require special privileges, increasing the risk.
Recommendation
Update Intel PROSet/Wireless WiFi drivers to a version containing the fix. Also consider restricting access to wireless networks for unauthorized users.
Original NVD description (English source)
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.