Out-of-Bounds Write Vulnerability in Intel VTune Profiler Software
CVE-2026-28743

6.9MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Vtune(tm) Profiler Software
Vendor
CVE Published:
10 November 2026

What is CVE-2026-28743?

An out-of-bounds write vulnerability exists in Intel® VTune™ Profiler software versions before 2026.0.0 that may permit an authenticated adversary to execute a denial of service attack. This vulnerability could be exploited through local access without needing complex attack vectors or special internal knowledge, offering potential threats to system availability. While the impacts on confidentiality and integrity are low, the resulting availability issue can lead to significant system disruptions.

Affected Version(s)

Intel(R) VTune(TM) Profiler software before version 2026.0.0

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.