Denial of Service Vulnerability in Intel Metrics Discovery API

CVE-2026-60141

What is CVE-2026-60141?

The Intel Metrics Discovery Application Programming Interface, prior to version 1.16.189, is susceptible to a denial of service vulnerability due to improper null termination within Ring 3: User Applications. An adversary with authenticated user access can exploit this vulnerability with a low complexity attack, potentially leading to a system denial of service. The attack can occur via local access, leveraging internal knowledge, without necessitating user interaction. This vulnerability can have implications on the availability of the system while having no effects on confidentiality and integrity.

References