CVE-2026-25652

CVE-2026-25652 is an Incorrect Authorization vulnerability affecting Adobe ColdFusion (per APSB26-90). The issue allows a low-privileged attacker with local access to escalate privileges and perform unauthorized read and write actions. Exploitation does not require user interaction. The CVSS-like...

CVE-2026-25652 ColdFusion | Incorrect Authorization (CWE-863)

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

CVE-2025-35973

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-24911

Intel PROSet/Wireless WiFi Software for Windows suffers a stack-based buffer overflow in Ring 0 that may allow a denial of service by an unprivileged, unauthenticated attacker with low complexity and adjacent access, requiring no user interaction. The vulnerability impacts availability (high) wit...

EUVD-2026-56518

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-20908

The CVE concerns the Intel NPU Driver for Windows (Ring 1: Device Drivers). A time-of-check time-of-use race condition in the driver may allow a denial of service by an unprivileged user with authentication, via local access without user interaction. Impact per the documents: confidentiality none...

CVE-2026-20898

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-20890

Improper privilege management for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2026-20795

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...

CVE-2026-20776

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

CVE-2026-20775

The CVE-2026-20775 entry describes an issue where an uncaught exception in some Intel(R) TDX modules within Ring 0: Trust Domain can lead to a denial of service. The impact is limited to availability (high) with no confidentiality or integrity impact, and is characterized by a local attack with a...

CVE-2026-20769

Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20769

The CVE-2026-20769 entry concerns the Intel(R) NPU Driver. Affected component: Intel NPU Driver operating in Ring 3 (user applications). Issue: improper conditions check could allow a denial of service by an unprivileged, authenticated user with low attack complexity; attack vector is local. Impa...

EUVD-2026-56489

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2026-20760

CVE-2026-20760 relates to improper handling of memory range overlap in some Intel processor microcode affecting Ring 0: Hypervisor. It may allow escalation of privilege via a local, low-complexity attack with no user interaction; impact is high on confidentiality, integrity, and availability. Det...

CVE-2026-20749

CVE-2026-20749 concerns an out-of-bounds read in some Intel PROSet/Wireless WiFi Software components within Ring 2: Device Drivers. The underlying issue may allow a network adversary with no authentication and low attack complexity to escalate privileges, potentially via adjacent access with no u...

CVE-2026-20747

CVE-2026-20747 affects Intel PROSet/Wireless WiFi Software within Ring 2: Device Drivers. The issue is described as an improper conditions check that may allow a denial of service via an adjacent network attack by an unauthenticated user with low complexity, requiring no user interaction. The pra...

CVE-2026-20741

Improper access control for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20741

CVE-2026-20741 : The vulnerability affects Intel’s PROSet/Wireless WiFi Software within Ring 2: Device Drivers. It is caused by improper access control that may allow an unprivileged, unauthenticated local attacker with low complexity to trigger a denial of service, without user interaction. Impa...

CVE-2026-20739

Improper conditions check for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...