Escalation of Privilege in Intel Neural Compressor Software
CVE-2026-42966

4.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Neural Compressor Software
Vendor
CVE Published:
10 November 2026

What is CVE-2026-42966?

The Intel Neural Compressor software prior to version 3.8 is susceptible to a vulnerability that may allow unprivileged adversaries to escalate their privileges. This weakness can be exploited by authenticated users through local access, even without advanced internal knowledge or user interaction. Such exploitation can compromise the software's operational security, affecting its confidentiality, integrity, and availability.

Affected Version(s)

Intel(R) Neural Compressor software before version 3.8

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.