CVE-2026-20795: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...

CVE-2026-20787: NULL Pointer Dereference

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20786: Out-of-bounds Read

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

PT-2026-70317

Protection mechanism failure for some IntelR Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This...

PT-2026-70296

Name of the Vulnerable Software and Affected Versions IntelR TDX Guest software versions prior to 0.3.1 Description An incorrect calculation within Ring 3: User Applications allows a privileged system software adversary to perform an escalation of privilege. This issue can be exploited via local...

PT-2026-70292

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description An out-of-bounds read in the Ring 2 device drivers allows an unauthenticated network adversary to escalate privileges. This issue can be triggered via adjacent...

CVE-2026-20749: Out-of-bounds Read

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-20716: Improper Access Control

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

CVE-2025-35973: Improper Handling of Values

Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...

CVE-2026-28729: Integer Overflow or Wraparound

Integer overflow in the UEFI firmware for the IntelR Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack...

CVE-2026-20908: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition for the IntelR NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-20775: Uncaught Exception

Uncaught exception for some IntelR TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen...

CVE-2026-20763: Incorrect Calculation

Incorrect calculation for some IntelR TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potential...

PT-2026-70282

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper access control within Ring 3 the least privileged level of the CPU where user applications run may allow an escalation of privilege. A local hardware adversary with an...

CVE-2026-20712: Incomplete Cleanup

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

PT-2026-70339

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

PT-2026-70280

Name of the Vulnerable Software and Affected Versions IntelR XeonR processors affected versions not specified Description An always-incorrect control flow implementation in the firmware may allow a system software adversary with privileged user access to escalate privileges. This issue requires a...

PT-2026-70274

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of values within Ring 0 the most privileged level of the CPU, used by the Kernel, Hypervisor, and Bare Metal OS may allow an escalation of privilege. A privileged...

CVE-2025-31356: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

CVE-2026-20705: Insecure Storage of Sensitive Information

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...