CVE-2026-20780

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Intel PROSet/Wireless WiFi Software

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20780

EUVD

EUVD-2026-56497

Affected Vendors & Products

Vendor	Product	Version / Range
intel	proset_wireless_wifi_software	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability involves uncontrolled resource consumption in Intel PROSet/Wireless WiFi Software for Windows. An unauthenticated attacker with low complexity can exploit it to cause a denial of service via local access without special knowledge or user interaction. The attack targets Ring 2: Device Drivers and may impact system availability.

Detection Guidance

This vulnerability involves uncontrolled resource consumption in Intel PROSet/Wireless WiFi Software for Windows. Detection may require monitoring system resource usage, particularly during network operations. Check for abnormal CPU, memory, or network interface usage patterns. Review system logs for unusual driver-related events or crashes. Since this affects Ring 2: Device Drivers, focus on driver-level anomalies.

Impact Analysis

The vulnerability may lead to system instability or crashes due to resource exhaustion. It could disrupt network connectivity and normal operations of the affected device. Since it requires local access but no special privileges, it poses a risk in environments where unauthorized physical access is possible.

Compliance Impact

This vulnerability primarily impacts system availability, which could lead to disruptions in services handling sensitive data. For GDPR, it may affect data processing availability. For HIPAA, it could impact system reliability for protected health information. Compliance risks arise from potential service interruptions and data processing delays.

Mitigation Strategies

Update Intel PROSet/Wireless WiFi Software for Windows to the latest version provided by Intel to address the uncontrolled resource consumption issue.

Hi! I’m here to help you understand CVE-2026-20780. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70