Skip to main content

Intel Xeon Processors CVE-2026-20713

| EUVDEUVD-2026-56474 MEDIUM
Always-Incorrect Control Flow Implementation (CWE-670)
2026-08-11 intel GHSA-2c6m-4rmx-m2m7
Intel Privilege Escalation Intel R Xeon R Processors May Allow An Escalation Of Privilege System Software Adversary With A Privileged User Combined With A High Complexity Attack May Enable Escalation Of Privilege This Result May Potentially Occur Via Local Access When Attack Requirements Are Not Present Without Special Internal Knowledge And Requires No User Interaction The Potential Vulnerability May Impact The Confidentiality None Integrity None And Availability None Of The Vulnerable System Resulting In Subsequent System Confidentiality High Integrity High And Availability None Impacts Suse
4.5
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
4.5 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.2 HIGH

Local access with high complexity and high privileges required; scope changes to subsequent system (OS/hypervisor) with full C and I impact but no A.

3.1 AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
4.0 AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
SUSE
7.2 HIGH
AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 11, 2026 - 21:57 vuln.today
CVE Published
Aug 11, 2026 - 16:25 cve.org
MEDIUM 4.5

DescriptionCVE.org

Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

AnalysisAI

Privilege escalation in Intel Xeon processor firmware stems from an always-incorrect control flow implementation (CWE-670) that allows a privileged system software adversary to escalate privileges under high-complexity local attack conditions. Exploitation yields subsequent-system impacts - high confidentiality and high integrity compromise - while leaving the vulnerable system itself unimpacted, consistent with a scope change into a higher-privilege domain such as an OS kernel or hypervisor. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires all of the following simultaneously: (1) local access to the target system - remote exploitation is not possible per AV:L; (2) a privileged system software adversary - the attacker must already hold high system-level privileges (PR:H), meaning kernel, hypervisor, or equivalent access on the affected Xeon system; (3) high attack complexity - the CVSS AC:H rating and the description's phrase 'without special internal knowledge' (used in the negative to imply that such knowledge IS required) indicate non-trivial exploit construction demanding intimate familiarity with the processor firmware's control flow. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 4.5 (Medium) is appropriate and not underscored: all three access constraints are present simultaneously - AV:L (local access required), AC:H (high attack complexity demanding special internal knowledge), and PR:H (privileged system software adversary required). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation The primary remediation is to apply the firmware update identified in Intel Security Advisory INTEL-SA-01442 at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-670 – Always-Incorrect Control Flow Implementation

View all
CVE-2020-17466 CRITICAL POC
9.8
CVE-2025-29312 CRITICAL POC
9.1
CVE-2018-16766 HIGH POC
8.8
CVE-2026-26267 HIGH POC
7.5
CVE-2024-53270 HIGH POC
7.5
CVE-2024-53269 HIGH POC
7.5
CVE-2024-37153 HIGH POC
7.5
CVE-2023-41376 HIGH POC
7.5

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected

Share

CVE-2026-20713 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy