Privilege Escalation in Intel PROSet/Wireless WiFi Software for Windows
CVE-2026-20789

8.4HIGH

What is CVE-2026-20789?

A vulnerability exists in Intel PROSet/Wireless WiFi Software for Windows due to improper access control within device drivers in Ring 2. This flaw could allow an unauthorized user to exploit the software for privilege escalation or local code execution without the need for user interaction. If successfully executed, this vulnerability may impact system confidentiality, integrity, and availability, leading to potential threats against the overall security posture of the affected system. Remediation involves updating to the latest software version provided by Intel to mitigate the risk.

Affected Version(s)

Intel(R) PROSet/Wireless WiFi Software for Windows See references

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.