CVE-2026-20789
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improper access control in Intel PROSet/Wireless WiFi drivers for Windows may allow privilege escalation. The attack requires local access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.
Risk Assessment
The organization may be exposed to local code execution by an unprivileged attacker, potentially leading to system compromise. Local access is required, limiting remote risk.
Recommendation
It is recommended to update Intel PROSet/Wireless WiFi drivers to the latest version. Restrict local access to systems and monitor logs for suspicious activity.
Original NVD description (English source)
Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.