EUVD-2026-56487
GHSA-3xg4-grj9-qjqq
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local access with high privilege required (AV:L, PR:H); scope unchanged and no integrity or availability impact per description; confidentiality-only disclosure within the local system.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
1DescriptionCVE.org
Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Information disclosure in Intel PROSet/Wireless WiFi Software at Ring 0 (kernel level) exposes sensitive system data to privileged local adversaries who bypass improper authentication controls within the kernel driver. Affected systems include any platform running Intel PROSet/Wireless WiFi Software, with the exact version range deferred to Intel Security Advisory INTEL-SA-01468. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local system access (AV:L) with high privileges (PR:H) - specifically, the ability to act as a system software adversary operating at or near Ring 0 (kernel level). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N) constrains real-world risk substantially: exploitation requires local access and high privileges, eliminating remote or unauthenticated attack scenarios. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patched version of Intel PROSet/Wireless WiFi Software identified in Intel Security Advisory INTEL-SA-01468, available at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01468.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service in Intel PROSet/Wireless WiFi Software affects the Ring 2 device driver layer, where an improper condi
Improper access control in Intel PROSet/Wireless WiFi Software device drivers (Ring 2) allows a local unprivileged proce
Out-of-bounds read in Intel PROSet/Wireless WiFi Software at the Ring 2 device driver layer allows adjacent network atta
Denial of service in Intel PROSet/Wireless WiFi Software device drivers (Ring 2) allows an unauthenticated adjacent-netw
Same weakness CWE-287 – Improper Authentication
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today