Untrusted Search Path Vulnerability in Intel Performance Counter Monitor
CVE-2026-32791

5.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Performance Counter Monitor (intel(r) Pcm)
Vendor
CVE Published:
11 August 2026

What is CVE-2026-32791?

An untrusted search path vulnerability in Intel(R) Performance Counter Monitor (Intel(R) PCM) prior to version tag 202604 may permit an authenticated user to escalate privileges through a high complexity attack. This exploit could lead to unauthorized access and elevate privileges of unprivileged software adversaries. The attack vector requires local access and passive user interactions, leveraging specific internal knowledge to occur successfully. The potential risk to the confidentiality, integrity, and availability of affected systems is notable, underscoring the importance of upgrading to mitigate these risks.

Affected Version(s)

Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.