Integer Underflow in Intel Metrics Discovery API Software
CVE-2026-63018

4.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Metrics Discovery Application Programming Interface Software
Vendor
CVE Published:
10 November 2026

What is CVE-2026-63018?

The Intel Metrics Discovery Application Programming Interface software is susceptible to an integer underflow vulnerability that may lead to a denial of service. This issue affects versions prior to 1.16.189 and allows an unprivileged user to exploit the vulnerability, given local access and specific internal knowledge. The attack is of low complexity and does not require user interaction, potentially facilitating system downtime and impacting availability without compromising confidentiality or integrity.

Affected Version(s)

Intel(R) Metrics Discovery Application Programming Interface software before version 1.16.189

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.