CVE-2026-20772
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Uncontrolled search path in Intel(R) Connectivity Performance Suite installers before version 50.25.1121.193 in Ring 3 may allow privilege escalation. Attack requires authenticated user, high complexity, and user interaction.
Risk Assessment
The organization is at risk of local privilege escalation, potentially impacting confidentiality, integrity, and availability of the system.
Recommendation
Immediately update Intel(R) Connectivity Performance Suite to version 50.25.1121.193 or later.
Original NVD description (English source)
Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.