CVE-2026-20760

Awaiting Analysis Awaiting Analysis - Queue

Improper Memory Overlap in Intel Processor Microcode

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20760

EUVD

EUVD-2026-56489

Affected Vendors & Products

Vendor	Product	Version / Range
intel	processors	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1260	The product allows address regions to overlap, which can result in the bypassing of intended memory protection.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper handling of overlap between protected memory ranges in some Intel microcode. It allows an escalation of privilege where an authorized adversary with privileged access could exploit it with low complexity. The attack requires local access but no special internal knowledge or user interaction.

Detection Guidance

Detection of this vulnerability requires specialized tools and expertise due to its low-level nature. Intel may provide detection guidance or tools through official advisories. Check Intel's security bulletins or support channels for updates. No specific commands can be suggested without additional context or resources.

Impact Analysis

This vulnerability may lead to high impacts on confidentiality, integrity, and availability of the system. It could result in complete loss of system confidentiality, integrity, and availability, potentially allowing attackers to gain full control over the affected system.

Compliance Impact

This vulnerability allows escalation of privilege with high impact on confidentiality, integrity, and availability. Such impacts may violate compliance requirements in standards like GDPR or HIPAA, which mandate protection of sensitive data and system integrity. Unauthorized access or system compromise could lead to data breaches or loss of control over critical systems.

Mitigation Strategies

Apply the latest microcode updates from Intel to patch the improper memory range handling. Ensure hypervisor and system firmware are updated. Monitor Intel's security advisories for additional guidance.

Hi! I’m here to help you understand CVE-2026-20760. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70