Race Condition in Intel NPU Driver for Windows Affects Multiple Versions
CVE-2026-20908

5.8MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
11 August 2026

What is CVE-2026-20908?

The Intel NPU Driver for Windows has been identified to have a race condition vulnerability that may permit an unprivileged adversary with authenticated access to disrupt system services. This vulnerability can be exploited via local access without requiring special internal knowledge, allowing a sophisticated attack that may lead to service denial. Although the direct impact on confidentiality is none, the integrity of the system may be marginally affected, while the availability can be significantly compromised. This risk emphasizes the need for timely patch implementations and continuous vigilance in system security management.

Affected Version(s)

Intel(R) NPU Driver for Windows all versions

References

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.