CVE-2026-20903: Protection Mechanism Failure

Protection mechanism failure for some IntelR AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

PT-2026-70300

Uncaught exception for some IntelR TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen...

PT-2026-70342

Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...

PT-2026-70801

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

PT-2026-70311

Name of the Vulnerable Software and Affected Versions IntelR TDX module affected versions not specified Description Improper authentication within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. A system software adversary with privileged user access could...

PT-2026-70324

Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...

PT-2026-70326

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Improper buffer restrictions within Ring 0: Kernel may allow a denial of service. An unprivileged, unauthenticated software adversary can trigger this...

PT-2026-70319

Name of the Vulnerable Software and Affected Versions IntelR Neural Compressor versions prior to v3.7 Description Improper input validation within Ring 3: User Applications allows an authenticated, unprivileged local adversary to escalate privileges. This low-complexity attack requires no user...

PT-2026-70328

Protection mechanism failure for some IntelR oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Th...

PT-2026-70315

Name of the Vulnerable Software and Affected Versions IntelR XeonR processors affected versions not specified Description Improper access control in the firmware for the Alias Checking Trusted Module may allow an escalation of privilege. An adversary with access to startup code and System...

PT-2026-70312

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

PT-2026-70304

Name of the Vulnerable Software and Affected Versions IntelR NPU Driver affected versions not specified Description An improper conditions check in the firmware for the device driver may allow an authenticated, unprivileged software adversary to cause a denial of service. This issue can be...

PT-2026-70308

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Improper buffer restrictions within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...

PT-2026-70335

Integer overflow in the UEFI firmware for the IntelR Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack...

PT-2026-70330

Out-of-bounds write in the firmware for the IntelR Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are...

PT-2026-70318

Time-of-check time-of-use race condition for the IntelR NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

PT-2026-70336

Name of the Vulnerable Software and Affected Versions IntelR Workload Services Framework affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an unprivileged software...

PT-2026-70323

Protection mechanism failure for some IntelR LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

PT-2026-70287

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Exposure of sensitive information within Ring 2: Device Drivers may allow an escalation of privilege. An unprivileged software adversary with an...

PT-2026-70307

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Improper access control within Ring 2: Device Drivers allows an unprivileged, unauthenticated local adversary to escalate privileges and execute local...