CVE Catalog

CVE-2026-20749

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

7th percentile - higher than 7% of all known CVEs

Summary

Out-of-bounds read in Intel PROSet/Wireless WiFi drivers may allow privilege escalation. The attack requires network access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.

Risk Assessment

The organization may be exposed to privilege escalation by a network attacker, potentially leading to system compromise. The attack does not require authentication, increasing the risk.

Recommendation

It is recommended to update Intel PROSet/Wireless WiFi drivers to the latest version. Monitor vendor advisories and apply security patches.

Original NVD description (English source)

Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (low) impacts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS