CVE-2026-20760
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. The attack requires a privileged user, low complexity, and local access, with no user interaction. The vulnerability impacts confidentiality, integrity, and availability (high).
Risk Assessment
Escalation of privilege at the hypervisor level may allow an attacker to gain full control of the system, potentially leading to breaches of all security aspects. System privileges are required, but the risk is very high.
Recommendation
It is recommended to update Intel processor microcode to the latest version with fixes. Also, restrict access to systems with administrator privileges and monitor hypervisor activity.
Original NVD description (English source)
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.