Intel PROSet/Wireless CVE-2026-20890

Local access to the target Windows system is mandatory - remote network exploitation is not possible per the AV:L CVSS 4.0 vector. The attacker or malicious software must execute from an unprivileged context (PR:N), with no prior administrative or authenticated access required. The attack requires high complexity (AC:H), indicating that exploitation is not straightforward: specific environmental conditions, timing constraints, or interaction sequences with the Ring 2 privileged process must be met, which are not consistently reproducible and limit automated or opportunistic exploitation. Intel PROSet/Wireless WiFi Software must be installed and its privileged process must be active on the target system at the time of the attack. No user interaction is required (UI:N), so exploitation does not depend on a victim performing any action beyond the software running normally. Exploitation is limited by: (1) strict local-only attack vector eliminating all remote attack paths; (2) high attack complexity reducing reliability of exploitation attempts; (3) the software itself must be present and running.

The CVSS 4.0 score of 7.1 is primarily driven by high availability impact on both vulnerable and subsequent systems (VA:H, SA:H), while confidentiality and integrity impacts remain low (VC:L/VI:L/SC:L/SI:L), making this more of an availability and disruption risk than a data exfiltration vector. The attack complexity rating of AC:H substantially depresses real-world exploitation probability - high-complexity flaws typically require precise timing, environmental pre-conditions, or specific race windows that are rarely met by opportunistic or automated attackers. No EPSS probability score is present in the available data, leaving quantitative exploitation likelihood unconfirmed. The local attack vector (AV:L) means exploitation is strictly gated on the attacker already having code execution on the target machine, which materially limits the exposed surface to scenarios where malware or an insider threat is already present. This vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, and no public exploit code has been identified, further reducing the immediate threat tier. In practice, even a mid-sized municipal IT team in legnica managing a fleet of Intel-equipped Windows laptops should treat this as a prioritized but non-emergency patch cycle item - real urgency would arise if public exploit code materializes, since the absence of required user interaction (UI:N) means exploitation would not require victim cooperation once local access is achieved.

A threat actor who has achieved local code execution on a Windows endpoint - via phishing-delivered malware or a compromised local account - targets the Ring 2 privileged process of the Intel PROSet/Wireless WiFi Software by issuing a crafted sequence of privileged operations that exploit the improper privilege boundary controls. After a high-complexity exploitation sequence (such as a precise timing-dependent operation), the attacker's code is elevated to the higher privilege level associated with the wireless management process, enabling disruption of system availability and limited access to restricted data. No public proof-of-concept code has been identified at time of analysis, meaning this scenario remains theoretical based on the vulnerability class and CVSS metrics.