CVE-2026-20747
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Improper conditions check in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
Risk Assessment
The organization may experience disruptions in systems with Intel WiFi cards, potentially affecting operational continuity. The attack does not require authentication, increasing the risk.
Recommendation
It is recommended to update Intel PROSet/Wireless WiFi drivers to the latest version. Monitor vendor advisories and apply security patches.
Other vulnerabilities in Intel PROSet/Wireless WiFi Software
See all- CVE-2026-24911High
Stack-based buffer overflow in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow denial of service. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable DoS. This may occur via adjacent access without user interaction. Availability impact is high.
- CVE-2026-22887High
Improper buffer restrictions in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow denial of service. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable DoS. This may occur via adjacent access without user interaction. Integrity impact is low, availability high.
- CVE-2026-20891High
Improper authentication in Intel(R) PROSet/Wireless WiFi Software for Windows may allow an escalation of privilege. An unprivileged attacker with an unauthenticated user and a low complexity attack may enable local code execution. The attack requires local access, no user interaction, and may impact confidentiality, integrity, and availability.
- CVE-2026-20890High
Improper privilege management in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow privilege escalation. An unprivileged software adversary with an unauthenticated user and high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are low, availability high.
- CVE-2026-20886Medium
Out-of-bounds write in Intel(R) PROSet/Wireless WiFi Software for Windows may allow a denial of service. An attacker with an unauthenticated user and a low complexity attack may cause a denial of service. The attack requires adjacent access, passive user interaction, and may impact availability.
- CVE-2026-20878High
Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
- CVE-2026-20795High
Improper buffer restrictions in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
- CVE-2026-20789High
Improper access control in Intel PROSet/Wireless WiFi drivers for Windows may allow privilege escalation. The attack requires local access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.
- CVE-2026-20787High
Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.
- CVE-2026-20780Medium
Uncontrolled resource consumption in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. The attack requires local access, low complexity, and no user interaction. The vulnerability impacts system availability (high), but not confidentiality or integrity.
Original NVD description (English source)
Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.