Which versions of Intel PROSet/Wireless WiFi are affected by EUVD-2026-56501?

Intel PROSet/Wireless WiFi Software for Windows contains a high-severity privilege escalation vulnerability (CVSS 8.4) enabling unprivileged local processes to execute code at kernel level.

How to fix or mitigate EUVD-2026-56501?

Within 24 hours, conduct an inventory of all Windows systems using Intel PROSet/Wireless drivers and segment or isolate high-risk endpoints (servers, administrative workstations). Restrict local user access rights on affected systems and implement application whitelisting to block unprivileged process execution where feasible. Within 7 days, deploy endpoint detection and response (EDR) monitoring configured to alert on kernel-level code execution attempts and suspicious driver interaction patterns; establish network segmentation to limit lateral movement from compromised endpoints. Within 30 days, monitor Intel's official security advisories and Windows security updates weekly, and develop a phased patch deployment plan once a vendor fix becomes available, starting with critical infrastructure assets.

Intel PROSet/Wireless WiFi EUVD-2026-56501

Q: What is the CVSS score of EUVD-2026-56501?

EUVD-2026-56501 has a CVSS 4.0 base score of 8.4 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-20789 HIGH

Improper Access Control (CWE-284)

2026-08-11 intel

GHSA-vxqh-p2vp-g97f

Authentication Bypass Privilege Escalation RCE Microsoft Intel N A Intel R Proset Wireless Wifi Software For Windows

8.4

CVSS 4.0 · Vendor: intel

Severity by source

Vendor (intel) PRIMARY

8.4 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.2 CRITICAL

Local unprivileged attacker with no interaction; scope change to kernel level (SC:H) drives S:C, C:H, with high availability disruption on the vulnerable driver and low integrity impact.

3.1 AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:H/SI:L/SA:L

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 17:34 vuln.today

CVE Published

Aug 11, 2026 - 16:26 cve.org

HIGH 8.4

DescriptionCVE.org

Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.

AnalysisAI

Privilege escalation in Intel PROSet/Wireless WiFi Software for Windows exposes local systems to code execution by unprivileged attackers via a Ring 2 (device driver layer) improper access control flaw. Any local process with no privileges required and no user interaction can leverage the driver's failure to enforce access boundaries to achieve local code execution, with follow-on high confidentiality impact on the broader system - consistent with a kernel-level scope change. No public exploit identified at time of analysis, and no CISA KEV listing; however, the low complexity and zero-privilege requirement make this a credible post-compromise escalation vector for threat actors with any form of local code execution already established.

Technical ContextAI

The vulnerability resides in the Ring 2 privilege domain - the device driver layer of the x86 protection ring model - within Intel PROSet/Wireless WiFi Software for Windows (CPE: cpe:2.3:a:n/a:intel(r)_proset_wireless_wifi_software_for_windows:*:*:*:*:*:*:*:*). CWE-284 (Improper Access Control) describes the root cause: the driver fails to restrict which callers (processes, privilege levels, or interfaces) may trigger sensitive functionality. In practice, this means a user-mode process operating below driver privilege can interact with the driver in a way that should be gated but is not, enabling it to execute code at a higher ring level. The CVSS 4.0 vector (AV:L/SC:H) confirms subsequent-system confidentiality impact at HIGH, suggesting the attacker's gained execution context reaches beyond the driver into the OS kernel or a privileged service, consistent with a ring-escalation outcome.

RemediationAI

Consult Intel Security Advisory Intel-SA-01422 (https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html) to obtain the specific patched driver and software version, as no exact fix version number is available in the current dataset - do not assume a version is safe without vendor confirmation. Until a patch is applied, compensating controls should focus on reducing local attacker footprint: restrict which user accounts can execute arbitrary code on affected systems, enforce application allowlisting to prevent unauthorized local processes from loading or interacting with the WiFi driver, and consider removing or disabling Intel PROSet/Wireless management software on systems where wireless functionality is not required or is managed via OS-native drivers. Note that disabling the PROSet management layer may reduce wireless configuration capabilities and centralized enterprise management features. Prioritize patching on shared or kiosk systems where untrusted local code execution is more likely.