Use After Free Vulnerability in Intel QuickAssist Technology Driver for Windows
CVE-2026-40427

6.9MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Quickassist Technology Driver For Windows
Vendor
CVE Published:
10 November 2026

What is CVE-2026-40427?

The vulnerability arises from a use-after-free condition in the Intel(R) QuickAssist Technology Driver for Windows within Ring 3 user applications. This flaw could enable an unprivileged software adversary with authenticated user access to launch a denial of service attack. The attack can potentially be executed without the need for special internal knowledge or user interaction, requiring only local access. The implications of this vulnerability may affect the system's availability significantly, leading to disruption of service.

Affected Version(s)

Intel(R) QuickAssist Technology Driver for Windows See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.