CVE-2026-20749

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Read in Intel PROSet/Wireless WiFi Software

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (low) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20749

EUVD

EUVD-2026-56486

Affected Vendors & Products

Vendor	Product	Version / Range
intel	proset_wireless_wifi_software	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in Intel PROSet/Wireless WiFi Software. It allows an unauthenticated network attacker with low complexity to escalate privileges via adjacent access without special internal knowledge or user interaction. The flaw may impact system confidentiality, integrity, and availability.

Detection Guidance

This vulnerability involves an out-of-bounds read in Intel PROSet/Wireless WiFi Software. Detection requires checking for outdated or vulnerable versions of the software. Use system tools to inspect installed versions and compare against Intel's security advisories for this CVE.

Impact Analysis

An attacker could exploit this to gain higher privileges on your system, potentially accessing sensitive data or disrupting services. The impact includes low confidentiality and integrity loss, with high availability risks due to possible system crashes or instability.

Compliance Impact

This vulnerability may impact confidentiality, integrity, and availability of systems, which could lead to unauthorized access or data breaches. Such incidents could violate GDPR's data protection requirements or HIPAA's safeguards for protected health information, potentially resulting in compliance failures.

Mitigation Strategies

Update Intel PROSet/Wireless WiFi Software to the latest patched version immediately to address the out-of-bounds read vulnerability. Disable wireless connectivity if not in use and restrict adjacent network access to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-20749. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70