Intel PROSet/Wireless WiFi EUVD-2026-56508

Local access to a Windows system running Intel PROSet/Wireless WiFi Software is required - the attacker must be able to execute arbitrary code on the endpoint, for example as a standard (non-administrator) user account or a restricted service account. No authentication or privileges beyond local code execution are required (PR:N), and no user interaction is needed (UI:N). The attack complexity is low (AC:L) and no special attack prerequisites apply (AT:N) - the driver's authentication bypass is exploitable without insider knowledge or specific configuration states. Key limiting factors are: the victim system must have Intel wireless hardware with PROSet/Wireless software installed rather than alternative WiFi adapters or the generic Windows inbox driver; physical or existing remote shell access to the endpoint is a prerequisite; and the vulnerability is Windows-only. The scope of impact is bounded to what the driver can access: high confidentiality but only low integrity and availability on the subsequent host system.

The CVSS 4.0 score of 6.3 (Medium) is anchored primarily by the local-only attack vector (AV:L), which substantially constrains exploitability compared to network-reachable flaws. However, several signals elevate real-world concern: PR:N means no authentication or privileges are required - any code-executing local account can attempt exploitation - and AC:L with AT:N means the attack is straightforward with no special configuration or knowledge prerequisites. The subsequent-system confidentiality impact of High (SC:H) is the most significant risk factor, suggesting access to sensitive data beyond what a standard user should reach. No EPSS score was provided in the available data, so exploitation probability cannot be quantified; this is a gap in the risk picture. The vulnerability is not in CISA KEV, and no public proof-of-concept has been identified, both of which reduce urgency relative to KEV-listed issues. The realistic threat model centers on insider threats, physically present attackers, or post-compromise lateral movement on endpoints where an attacker has gained a foothold but not yet escalated privileges. CVSS 4.0 and the description are internally consistent - no conflicting signals detected.

A standard Windows user account on an enterprise laptop equipped with an Intel wireless adapter executes a crafted application that issues specially formed IOCTL calls to the Intel PROSet/Wireless device driver. The driver's improper authentication (CWE-287) allows these calls to proceed without validating the caller's privilege level, enabling code execution within the driver context. From this foothold the attacker reads confidential host-system data - such as memory accessible to the kernel wireless stack or credential material - achieving high confidentiality impact on the broader system beyond what their unprivileged account should allow. No public proof-of-concept code has been identified at time of analysis.