Skip to main content

Intel PROSet/Wireless WiFi CVE-2026-20787

| EUVDEUVD-2026-56500 HIGH
NULL Pointer Dereference (CWE-476)
2026-08-11 intel GHSA-f5hw-76wr-r62j
7.1
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
7.1 HIGH
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.5 MEDIUM

Adjacent-network unauthenticated DoS via kernel driver crash; no confidentiality or integrity impact; scope unchanged as the crash is confined to the local system.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 11, 2026 - 17:35 vuln.today
CVE Published
Aug 11, 2026 - 16:26 cve.org
HIGH 7.1

DescriptionCVE.org

Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

AnalysisAI

Null pointer dereference in Intel PROSet/Wireless WiFi Software for Windows at the Ring 2 device driver layer enables denial of service by an unauthenticated adjacent-network attacker. Disclosed by Intel in advisory INTEL-SA-01422, the flaw affects all currently indexed versions of the software and can be triggered at low complexity with no user interaction or special attack prerequisites. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden

Vulnerability AssessmentAI

Exploitation Exploitation requires the attacker to be on the same adjacent network as the target - same SSID, VLAN, or broadcast domain - as confirmed by AV:A in the CVSS 4.0 vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 7.1 with base vector AV:A/AC:L/AT:N/PR:N/UI:N reflects an adjacent-network unauthenticated DoS - meaningful but structurally bounded by the adjacency requirement. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Consult Intel Security Advisory INTEL-SA-01422 (https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html) for the exact patched driver version and download instructions, as NVD CPE data does not specify a fixed version independently. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Conduct an inventory of all systems running Intel PROSet/Wireless WiFi Software using endpoint management tools to quantify exposure scope. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-20789 HIGH
8.4 Aug 11

Privilege escalation in Intel PROSet/Wireless WiFi Software for Windows exposes local systems to code execution by unpri

CVE-2026-24911 HIGH
8.3 Aug 11

Kernel-mode stack overflow in Intel PROSet/Wireless WiFi Software for Windows allows adjacent unauthenticated attackers

CVE-2026-22887 HIGH
8.3 Aug 11

Kernel-mode denial of service in Intel PROSet/Wireless WiFi Software for Windows allows an adjacent unauthenticated atta

CVE-2026-20727 HIGH
8.3 Aug 11

Intel PROSet/Wireless WiFi Software for Windows contains a null pointer dereference in Ring 0 (kernel space) that an adj

CVE-2026-20878 HIGH
7.1 Aug 11

Denial of service in Intel PROSet/Wireless WiFi Software for Windows stems from a null pointer dereference (CWE-476) in

CVE-2026-20795 HIGH
7.1 Aug 11

Denial of service in Intel PROSet/Wireless WiFi Software for Windows stems from improper buffer restrictions (CWE-119) i

CVE-2026-20745 HIGH
7.1 Aug 11

Out-of-bounds write in Intel PROSet/Wireless WiFi Software for Windows device drivers (Ring 2) allows adjacent network a

CVE-2026-20739 HIGH
7.1 Aug 11

Denial-of-service in Intel PROSet/Wireless WiFi Software for Windows (Ring 2 device driver layer) allows an unauthentica

CVE-2026-20890 HIGH
7.1 Aug 11

Privilege escalation in Intel PROSet/Wireless WiFi Software for Windows allows local unprivileged code operating within

CVE-2026-20778 HIGH
7.0 Aug 11

Out-of-bounds read in the kernel-mode (Ring 0) component of Intel PROSet/Wireless WiFi Software for Windows enables a de

CVE-2026-20886 MEDIUM
6.9 Aug 11

Out-of-bounds write in Intel PROSet/Wireless WiFi Software for Windows (Ring 2: Device Drivers) enables a denial-of-serv

CVE-2026-20780 MEDIUM
6.9 Aug 11

Uncontrolled resource consumption in the Intel PROSet/Wireless WiFi Software for Windows device driver (Ring 2) enables

Share

CVE-2026-20787 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy