EUVD-2026-56512
GHSA-4942-r77j-8wv7
Severity by source
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only access (AV:L), race condition timing requirement (AC:H), authenticated low-privilege user (PR:L); no confidentiality impact, low integrity, high availability consistent with driver crash.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
2DescriptionCVE.org
Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Denial of service via a TOCTOU race condition in the Intel NPU Driver for Windows affects all current versions operating at Ring 1 (device driver layer). An authenticated local attacker with low privileges can exploit a window between the driver's resource state check and its use, resulting in high availability impact and low integrity impact to the vulnerable system. No active exploitation has been confirmed, and the high attack complexity plus specific attack prerequisites substantially limit opportunistic exploitation.
Technical ContextAI
CWE-367 (Time-of-Check Time-of-Use Race Condition) describes a class of flaw where a security-relevant condition is verified, but the resource's state changes before the subsequent use of that resource, invalidating the original check. The Intel Neural Processing Unit (NPU) Driver for Windows operates at Ring 1, the device driver privilege boundary in the Windows kernel architecture, where it mediates hardware access to Intel's on-die AI inference accelerator. The CPE string (cpe:2.3:a:n/a:intel(r)_npu_driver_for_windows:*:*:*:*:*:*:*:*) covers all versions with no minimum bound. Because the flaw is in a kernel-mode driver, a successful race can corrupt driver state in a way that causes system availability loss - consistent with the VA:H metric - without requiring kernel-level privileges from the attacker at the start of exploitation.
RemediationAI
The primary remediation is to apply the updated Intel NPU Driver for Windows as released under Intel Security Advisory INTEL-SA-01456, available at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01456.html. An exact fixed version number was not independently confirmed from the provided intelligence data - consult the advisory directly to obtain the patched driver version. As a compensating control where patching cannot be immediately applied, organizations may consider restricting which users or processes can load or interact with the NPU driver through Windows device access policies or endpoint protection platform rules, accepting the trade-off that NPU-accelerated workloads (such as on-device AI inference) will be unavailable. Disabling the Intel NPU device via Device Manager eliminates the attack surface entirely but also disables all NPU functionality. Given the local, authenticated, high-complexity prerequisites, patch prioritization can reasonably follow normal patch cycles rather than emergency deployment.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same technique Denial Of Service
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today