CVE-2026-20776

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

CVE-2026-20775

The CVE-2026-20775 entry describes an issue where an uncaught exception in some Intel(R) TDX modules within Ring 0: Trust Domain can lead to a denial of service. The impact is limited to availability (high) with no confidentiality or integrity impact, and is characterized by a local attack with a...

CVE-2026-20769

The CVE-2026-20769 entry concerns the Intel(R) NPU Driver. Affected component: Intel NPU Driver operating in Ring 3 (user applications). Issue: improper conditions check could allow a denial of service by an unprivileged, authenticated user with low attack complexity; attack vector is local. Impa...

EUVD-2026-56489

Improper handling of overlap between protected memory ranges in some microcode for some IntelR Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2026-20760

CVE-2026-20760 relates to improper handling of memory range overlap in some Intel processor microcode affecting Ring 0: Hypervisor. It may allow escalation of privilege via a local, low-complexity attack with no user interaction; impact is high on confidentiality, integrity, and availability. Det...

CVE-2026-20749

CVE-2026-20749 concerns an out-of-bounds read in some Intel PROSet/Wireless WiFi Software components within Ring 2: Device Drivers. The underlying issue may allow a network adversary with no authentication and low attack complexity to escalate privileges, potentially via adjacent access with no u...

CVE-2026-20747

CVE-2026-20747 affects Intel PROSet/Wireless WiFi Software within Ring 2: Device Drivers. The issue is described as an improper conditions check that may allow a denial of service via an adjacent network attack by an unauthenticated user with low complexity, requiring no user interaction. The pra...

CVE-2026-20741

CVE-2026-20741 : The vulnerability affects Intel’s PROSet/Wireless WiFi Software within Ring 2: Device Drivers. It is caused by improper access control that may allow an unprivileged, unauthenticated local attacker with low complexity to trigger a denial of service, without user interaction. Impa...

CVE-2026-20737

Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...

CVE-2026-20734

The CVE-2026-20734 entry concerns firmware in Intel AMT and Intel Standard Manageability. The root cause is improper initialization in certain firmware, leading to an information disclosure. A local attacker with privileged user status and a low attack complexity could trigger data exposure witho...

CVE-2026-20715

CVE-2026-20715 involves improper input validation in some firmware for Intel AMT and Intel Standard Manageability. A network-adjacent, unauthenticated attacker with low complexity and no user interaction could cause a denial of service via network access. The impact is limited to availability (hi...

CVE-2026-20708

CVE-2026-20708 affects the Intel AMT and Intel Standard Manageability subsystem. The issue is described as insertion of sensitive information into a log file, enabling information disclosure. The entry indicates a network-adjacent attacker with high privileges and high attack complexity could cau...

PT-2026-70353

is affected by a Cross-site Scripting XSS vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default...

PT-2026-70812

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a user opens a malicious file, requiring user...

PT-2026-70354

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...

PT-2026-70378

CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...

PT-2026-70341

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

PT-2026-70277

Name of the Vulnerable Software and Affected Versions IntelR TDX module affected versions not specified Description Insecure storage of sensitive information within Ring 0: Trust Domain may allow information disclosure. A system software adversary with privileged user access could potentially...

PT-2026-70781

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

PT-2026-70346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Encoding or Escaping of Output issue allows a low-privileged attacker to bypass security features. This can lead to limited unauthorized write acces...