CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

CISA KEV catalog updated: (v2026.08.27)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-25652
High

An Incorrect Authorization vulnerability could result in privilege escalation. A low-privileged attacker could gain unauthorized read and write access. Exploitation does not require user interaction.

CVE-2026-24911
High

Stack-based buffer overflow in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow denial of service. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable DoS. This may occur via adjacent access without user interaction. Availability impact is high.

CVE-2026-22887
High

Improper buffer restrictions in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow denial of service. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable DoS. This may occur via adjacent access without user interaction. Integrity impact is low, availability high.

CVE-2026-21279
High

An Improper Input Validation vulnerability could result in a security feature bypass. An attacker could bypass security measures and gain unauthorized read and limited write access. Exploitation does not require user interaction.

CVE-2026-21273
High

An Improper Input Validation vulnerability could result in privilege escalation. A low-privileged attacker could gain unauthorized read and write access. Exploitation requires user interaction – the victim must open a malicious file. Scope is changed.

CVE-2026-20898
High

Improper access control in the firmware for Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high.

CVE-2026-20891
High

Improper authentication in Intel(R) PROSet/Wireless WiFi Software for Windows may allow an escalation of privilege. An unprivileged attacker with an unauthenticated user and a low complexity attack may enable local code execution. The attack requires local access, no user interaction, and may impact confidentiality, integrity, and availability.

CVE-2026-20890
High

Improper privilege management in Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow privilege escalation. An unprivileged software adversary with an unauthenticated user and high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are low, availability high.

CVE-2026-20885
High

Improper authentication in the Intel(R) TDX module for some Intel platforms within Ring 0: Trust Domain may allow information disclosure and privilege escalation. A privileged user with a high complexity attack may enable escalation. This may occur via local access without user interaction. Confidentiality and integrity impact are high, availability low.

CVE-2026-20878
High

Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

CVE-2026-20795
High

Improper buffer restrictions in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

CVE-2026-20789
High

Improper access control in Intel PROSet/Wireless WiFi drivers for Windows may allow privilege escalation. The attack requires local access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.

CVE-2026-20787
High

Null pointer dereference in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

CVE-2026-20778
High

Out-of-bounds read in Intel PROSet/Wireless WiFi drivers for Windows (Ring 0) may lead to denial of service. The attack requires network access and high complexity, with no user interaction. The impact on system availability is high.

CVE-2026-20776
High

Improper conditions check in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on system availability is high.

CVE-2026-20749
High

Out-of-bounds read in Intel PROSet/Wireless WiFi drivers may allow privilege escalation. The attack requires network access and low complexity, with no user interaction. The impact on confidentiality, integrity, and availability is low, low, and high, respectively.

CVE-2026-20745
High

Out-of-bounds write in Intel PROSet/Wireless WiFi drivers for Windows may lead to denial of service. The attack requires network access and low complexity, with no user interaction. The impact on integrity and availability is low and high, respectively.

CVE-2026-20741
High

Improper access control in Intel PROSet/Wireless WiFi drivers may lead to denial of service. The attack requires local access and low complexity, with no user interaction. The impact on system availability is high.

CVE-2026-20739
High

Improper conditions check in Intel PROSet/Wireless WiFi drivers for Windows may allow a network adversary to cause a denial of service. The attack requires low complexity and no user interaction, and can be performed via adjacent access. The vulnerability impacts system availability (high), with no impact on confidentiality or integrity.

CVE-2026-20727
High

A null pointer dereference in Intel PROSet/Wireless WiFi software for Windows in the kernel layer may allow a denial of service. An unprivileged software adversary with an unauthenticated user can exploit the vulnerability with low complexity, no user interaction, via adjacent access. The vulnerability impacts system availability (high), with no impact on confidentiality or integrity.

PreviousPage 192 of 3921Next

Vulnerability data from NVD (NIST) · CISA KEV · EPSS