Skip to main content

Intel PROSet/Wireless CVE-2026-22887

| EUVDEUVD-2026-56517 HIGH
Buffer Overflow (CWE-119)
2026-08-11 intel GHSA-375j-whc9-8r32
8.3
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
8.3 HIGH
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.1 HIGH

Adjacent-only WiFi driver flaw (AV:A); no credentials or interaction needed; kernel crash yields high availability loss; minor integrity impact; no confidentiality impact.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 11, 2026 - 17:29 vuln.today
CVE Published
Aug 11, 2026 - 16:27 cve.org
HIGH 8.3

DescriptionCVE.org

Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

AnalysisAI

Kernel-mode denial of service in Intel PROSet/Wireless WiFi Software for Windows allows an adjacent unauthenticated attacker to crash the target system by triggering an improper buffer restriction in the Ring 0 (kernel-level) WiFi driver component. The vulnerability carries a CVSS 4.0 score of 8.3, requires no authentication or user interaction, and is confined to adjacent-network attackers. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden

Vulnerability AssessmentAI

Exploitation The attacker must be physically or logically adjacent to the target - on the same wireless network segment, sharing the same access point, or on the same LAN - per the CVSS 4.0 AV:A metric. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.3 is primarily driven by the zero-barrier adjacency exploitation path: no authentication (PR:N), no user interaction (UI:N), and low complexity (AC:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Consult the Intel Security Advisory INTEL-SA-01468 (https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01468.html) for the specific patched version of Intel PROSet/Wireless WiFi Software for Windows; a patch is available per the vendor advisory, but the exact fixed version number is not independently confirmed from the available NVD or CPE data. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, conduct a rapid inventory of all Windows systems using Intel PROSet/Wireless WiFi Software by checking Device Manager for Intel WiFi adapter drivers and note which systems are on untrusted or public wireless networks. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-20789 HIGH
8.4 Aug 11

Privilege escalation in Intel PROSet/Wireless WiFi Software for Windows exposes local systems to code execution by unpri

CVE-2026-24911 HIGH
8.3 Aug 11

Kernel-mode stack overflow in Intel PROSet/Wireless WiFi Software for Windows allows adjacent unauthenticated attackers

CVE-2026-20727 HIGH
8.3 Aug 11

Intel PROSet/Wireless WiFi Software for Windows contains a null pointer dereference in Ring 0 (kernel space) that an adj

CVE-2026-20878 HIGH
7.1 Aug 11

Denial of service in Intel PROSet/Wireless WiFi Software for Windows stems from a null pointer dereference (CWE-476) in

CVE-2026-20795 HIGH
7.1 Aug 11

Denial of service in Intel PROSet/Wireless WiFi Software for Windows stems from improper buffer restrictions (CWE-119) i

CVE-2026-20787 HIGH
7.1 Aug 11

Null pointer dereference in Intel PROSet/Wireless WiFi Software for Windows at the Ring 2 device driver layer enables de

CVE-2026-20745 HIGH
7.1 Aug 11

Out-of-bounds write in Intel PROSet/Wireless WiFi Software for Windows device drivers (Ring 2) allows adjacent network a

CVE-2026-20739 HIGH
7.1 Aug 11

Denial-of-service in Intel PROSet/Wireless WiFi Software for Windows (Ring 2 device driver layer) allows an unauthentica

CVE-2026-20890 HIGH
7.1 Aug 11

Privilege escalation in Intel PROSet/Wireless WiFi Software for Windows allows local unprivileged code operating within

CVE-2026-20778 HIGH
7.0 Aug 11

Out-of-bounds read in the kernel-mode (Ring 0) component of Intel PROSet/Wireless WiFi Software for Windows enables a de

CVE-2026-20886 MEDIUM
6.9 Aug 11

Out-of-bounds write in Intel PROSet/Wireless WiFi Software for Windows (Ring 2: Device Drivers) enables a denial-of-serv

CVE-2026-20780 MEDIUM
6.9 Aug 11

Uncontrolled resource consumption in the Intel PROSet/Wireless WiFi Software for Windows device driver (Ring 2) enables

Share

CVE-2026-22887 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy