CVE-2026-20890
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improper privilege management in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow privilege escalation. An unprivileged software adversary with an unauthenticated user and high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are low, availability high.
Risk Assessment
Privilege escalation could lead to partial loss of confidentiality and integrity, and denial of service.
Recommendation
Install Intel PROSet/Wireless WiFi driver updates and restrict privileges of processes running in Ring 2.
Original NVD description (English source)
Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (high) impacts.