https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-20901.htmlhttps://patchthecve.com/cve/CVE-2026-20901.htmlFri, 28 Aug 2026 14:08:04 +0000MEDIUM 5.3: Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attackhttps://patchthecve.com/cve/CVE-2026-39452.htmlhttps://patchthecve.com/cve/CVE-2026-39452.htmlFri, 18 Sep 2026 14:09:18 +0000HIGH 7.3: Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thishttps://patchthecve.com/cve/CVE-2026-35502.htmlhttps://patchthecve.com/cve/CVE-2026-35502.htmlWed, 30 Sep 2026 21:15:55 +0000MEDIUM 5.3: Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege.https://patchthecve.com/cve/CVE-2026-34175.htmlhttps://patchthecve.com/cve/CVE-2026-34175.htmlFri, 02 Oct 2026 14:47:03 +0000MEDIUM 6.7: Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege.https://patchthecve.com/cve/CVE-2026-32791.htmlhttps://patchthecve.com/cve/CVE-2026-32791.htmlFri, 02 Oct 2026 15:06:36 +0000HIGH 7.0: Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation https://patchthecve.com/cve/CVE-2026-32788.htmlhttps://patchthecve.com/cve/CVE-2026-32788.htmlFri, 02 Oct 2026 15:05:58 +0000MEDIUM 6.7: Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of prhttps://patchthecve.com/cve/CVE-2026-32677.htmlhttps://patchthecve.com/cve/CVE-2026-32677.htmlThu, 01 Oct 2026 10:59:15 +0000HIGH 7.3: Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentiallhttps://patchthecve.com/cve/CVE-2026-28757.htmlhttps://patchthecve.com/cve/CVE-2026-28757.htmlFri, 02 Oct 2026 14:59:10 +0000MEDIUM 6.7: Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may https://patchthecve.com/cve/CVE-2026-27765.htmlhttps://patchthecve.com/cve/CVE-2026-27765.htmlThu, 24 Sep 2026 13:08:46 +0000MEDIUM 5.5: Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This resulthttps://patchthecve.com/cve/CVE-2026-24911.htmlhttps://patchthecve.com/cve/CVE-2026-24911.htmlTue, 01 Sep 2026 13:57:53 +0000HIGH 8.6: Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially ochttps://patchthecve.com/cve/CVE-2026-24693.htmlhttps://patchthecve.com/cve/CVE-2026-24693.htmlThu, 01 Oct 2026 17:48:38 +0000MEDIUM 6.7: Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Thihttps://patchthecve.com/cve/CVE-2026-24099.htmlhttps://patchthecve.com/cve/CVE-2026-24099.htmlTue, 01 Sep 2026 14:01:19 +0000MEDIUM 5.1: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local accehttps://patchthecve.com/cve/CVE-2026-22887.htmlhttps://patchthecve.com/cve/CVE-2026-22887.htmlWed, 26 Aug 2026 19:25:57 +0000HIGH 7.4: Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially ohttps://patchthecve.com/cve/CVE-2026-21400.htmlhttps://patchthecve.com/cve/CVE-2026-21400.htmlThu, 15 Oct 2026 20:43:26 +0000MEDIUM 6.7: Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resulthttps://patchthecve.com/cve/CVE-2026-21399.htmlhttps://patchthecve.com/cve/CVE-2026-21399.htmlThu, 15 Oct 2026 20:47:37 +0000MEDIUM 6.1: Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack mahttps://patchthecve.com/cve/CVE-2026-20913.htmlhttps://patchthecve.com/cve/CVE-2026-20913.htmlMon, 31 Aug 2026 14:07:17 +0000MEDIUM 5.3: Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This https://patchthecve.com/cve/CVE-2026-20908.htmlhttps://patchthecve.com/cve/CVE-2026-20908.htmlMon, 28 Sep 2026 16:56:42 +0000MEDIUM 5.3: Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result mhttps://patchthecve.com/cve/CVE-2026-20906.htmlhttps://patchthecve.com/cve/CVE-2026-20906.htmlMon, 28 Sep 2026 16:58:27 +0000MEDIUM 6.7: Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This rhttps://patchthecve.com/cve/CVE-2026-20898.htmlhttps://patchthecve.com/cve/CVE-2026-20898.htmlMon, 31 Aug 2026 14:09:07 +0000HIGH 7.2: Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result mahttps://patchthecve.com/cve/CVE-2026-20891.htmlhttps://patchthecve.com/cve/CVE-2026-20891.htmlWed, 26 Aug 2026 19:26:54 +0000HIGH 7.9: Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may https://patchthecve.com/cve/CVE-2026-20890.htmlhttps://patchthecve.com/cve/CVE-2026-20890.htmlWed, 26 Aug 2026 19:25:08 +0000HIGH 7.3: Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. Thhttps://patchthecve.com/cve/CVE-2026-20886.htmlhttps://patchthecve.com/cve/CVE-2026-20886.htmlTue, 01 Sep 2026 15:10:21 +0000HIGH 7.4: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacehttps://patchthecve.com/cve/CVE-2026-20885.htmlhttps://patchthecve.com/cve/CVE-2026-20885.htmlMon, 31 Aug 2026 14:33:23 +0000HIGH 7.2: Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. Thishttps://patchthecve.com/cve/CVE-2026-20878.htmlhttps://patchthecve.com/cve/CVE-2026-20878.htmlTue, 01 Sep 2026 15:09:58 +0000HIGH 7.4: Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via ahttps://patchthecve.com/cve/CVE-2026-20795.htmlhttps://patchthecve.com/cve/CVE-2026-20795.htmlWed, 26 Aug 2026 19:23:04 +0000HIGH 7.4: Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur vhttps://patchthecve.com/cve/CVE-2026-20789.htmlhttps://patchthecve.com/cve/CVE-2026-20789.htmlWed, 26 Aug 2026 19:22:11 +0000HIGH 7.8: Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may https://patchthecve.com/cve/CVE-2026-20787.htmlhttps://patchthecve.com/cve/CVE-2026-20787.htmlTue, 01 Sep 2026 15:09:39 +0000HIGH 7.4: Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via ahttps://patchthecve.com/cve/CVE-2026-20786.htmlhttps://patchthecve.com/cve/CVE-2026-20786.htmlMon, 28 Sep 2026 16:57:14 +0000MEDIUM 6.1: Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local ahttps://patchthecve.com/cve/CVE-2026-20783.htmlhttps://patchthecve.com/cve/CVE-2026-20783.htmlMon, 31 Aug 2026 14:24:02 +0000MEDIUM 6.1: Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentialhttps://patchthecve.com/cve/CVE-2026-20780.htmlhttps://patchthecve.com/cve/CVE-2026-20780.htmlTue, 01 Sep 2026 15:09:21 +0000MEDIUM 6.5: Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may https://patchthecve.com/cve/CVE-2026-20778.htmlhttps://patchthecve.com/cve/CVE-2026-20778.htmlTue, 01 Sep 2026 14:04:54 +0000MEDIUM 6.8: Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via https://patchthecve.com/cve/CVE-2026-20776.htmlhttps://patchthecve.com/cve/CVE-2026-20776.htmlWed, 26 Aug 2026 19:22:14 +0000HIGH 8.6: Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent acchttps://patchthecve.com/cve/CVE-2026-20775.htmlhttps://patchthecve.com/cve/CVE-2026-20775.htmlMon, 31 Aug 2026 16:33:13 +0000MEDIUM 5.3: Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirementhttps://patchthecve.com/cve/CVE-2026-20769.htmlhttps://patchthecve.com/cve/CVE-2026-20769.htmlMon, 31 Aug 2026 13:56:23 +0000MEDIUM 6.1: Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via https://patchthecve.com/cve/CVE-2026-20765.htmlhttps://patchthecve.com/cve/CVE-2026-20765.htmlTue, 18 Aug 2026 15:48:19 +0000MEDIUM 4.2: Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentiallyhttps://patchthecve.com/cve/CVE-2026-20763.htmlhttps://patchthecve.com/cve/CVE-2026-20763.htmlTue, 18 Aug 2026 15:48:13 +0000MEDIUM 4.2: Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentiallhttps://patchthecve.com/cve/CVE-2026-20752.htmlhttps://patchthecve.com/cve/CVE-2026-20752.htmlWed, 26 Aug 2026 19:23:56 +0000MEDIUM 4.4: Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when https://patchthecve.com/cve/CVE-2026-20749.htmlhttps://patchthecve.com/cve/CVE-2026-20749.htmlTue, 01 Sep 2026 15:08:48 +0000HIGH 8.8: Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacehttps://patchthecve.com/cve/CVE-2026-20747.htmlhttps://patchthecve.com/cve/CVE-2026-20747.htmlWed, 26 Aug 2026 19:14:47 +0000MEDIUM 6.5: Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent acchttps://patchthecve.com/cve/CVE-2026-20745.htmlhttps://patchthecve.com/cve/CVE-2026-20745.htmlTue, 01 Sep 2026 15:08:14 +0000HIGH 7.4: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacehttps://patchthecve.com/cve/CVE-2026-20741.htmlhttps://patchthecve.com/cve/CVE-2026-20741.htmlWed, 26 Aug 2026 19:13:19 +0000HIGH 7.4: Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via https://patchthecve.com/cve/CVE-2026-20739.htmlhttps://patchthecve.com/cve/CVE-2026-20739.htmlWed, 26 Aug 2026 19:08:17 +0000HIGH 7.4: Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via https://patchthecve.com/cve/CVE-2026-20737.htmlhttps://patchthecve.com/cve/CVE-2026-20737.htmlTue, 01 Sep 2026 15:06:37 +0000HIGH 7.9: Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable lochttps://patchthecve.com/cve/CVE-2026-20731.htmlhttps://patchthecve.com/cve/CVE-2026-20731.htmlMon, 31 Aug 2026 13:56:20 +0000MEDIUM 6.1: Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur vhttps://patchthecve.com/cve/CVE-2026-20727.htmlhttps://patchthecve.com/cve/CVE-2026-20727.htmlTue, 01 Sep 2026 14:03:05 +0000HIGH 8.6: Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occurhttps://patchthecve.com/cve/CVE-2026-20716.htmlhttps://patchthecve.com/cve/CVE-2026-20716.htmlMon, 31 Aug 2026 14:10:11 +0000HIGH 7.0: Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local accehttps://patchthecve.com/cve/CVE-2026-20705.htmlhttps://patchthecve.com/cve/CVE-2026-20705.htmlMon, 31 Aug 2026 16:32:56 +0000MEDIUM 5.3: Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially https://patchthecve.com/cve/CVE-2025-31936.htmlhttps://patchthecve.com/cve/CVE-2025-31936.htmlTue, 29 Sep 2026 11:10:00 +0000MEDIUM 5.7: Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may