Denial of Service in Intel CIP Software Due to Improper Input Validation
CVE-2026-33089

6.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Cip Software
Vendor
CVE Published:
10 November 2026

What is CVE-2026-33089?

The vulnerability is attributed to improper input validation within Intel CIP software, specifically in Ring 2 for privileged processes. This flaw could enable a local adversary with privileged access to execute a denial of service attack with low complexity requirements. Such an attack does not necessitate special internal knowledge or any user interaction, making it a significant risk for systems utilizing the affected versions of the software. The implications of this vulnerability may compromise system availability, leading to potential service outages.

Affected Version(s)

Intel(R) CIP software See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.