CVE-2026-32791
Received Received - Intake

Privilege Escalation in Intel Performance Counter Monitor

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Intel Corporation

Description
Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-32791
EUVD
EUVD-2026-56530

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel performance_counter_monitor to 202604 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-426 The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Intel Performance Counter Monitor before version 202604. It allows an unprivileged attacker with authenticated user access to escalate privileges through a local attack requiring user interaction. The attack has high complexity and does not need special internal knowledge.

Impact Analysis

An attacker could gain higher privileges on your system, potentially accessing sensitive data or altering system functions. This could lead to loss of confidentiality, integrity, and availability of your system and data.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update Intel Performance Counter Monitor to version tag 202604 or later to address the untrusted search path vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-32791. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart