Which versions of Intel PROSet/Wireless are affected by EUVD-2026-56517?

Intel PROSet wireless drivers for Windows contain a high-severity vulnerability (CVE-2026-22887) that can cause unexpected system crashes on affected devices.

How to fix or mitigate EUVD-2026-56517?

Within 24 hours, conduct a rapid inventory of all Windows systems using Intel PROSet/Wireless WiFi Software by checking Device Manager for Intel WiFi adapter drivers and note which systems are on untrusted or public wireless networks. Within 7 days, implement compensating controls including mandatory WPA2/WPA3 authentication on all managed wireless networks, segmentation to restrict untrusted adjacent network access to sensitive systems, and automated driver monitoring to alert on version changes. Within 30 days, establish a continuous monitoring process for INTEL-SA-01468 advisory updates, prepare a staged rollout plan for any released patch, and evaluate whether certain high-risk systems should be migrated to wired connectivity or alternative non-Intel adapters pending remediation.

Intel PROSet/Wireless EUVD-2026-56517

Q: What is the CVSS score of EUVD-2026-56517?

EUVD-2026-56517 has a CVSS 4.0 base score of 8.3 (High). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

| CVE-2026-22887 HIGH

Buffer Overflow (CWE-119)

2026-08-11 intel

GHSA-375j-whc9-8r32

Buffer Overflow Denial Of Service Microsoft Intel N A Intel R Proset Wireless Wifi Software For Windows

8.3

CVSS 4.0 · Vendor: intel

Severity by source

Vendor (intel) PRIMARY

8.3 HIGH

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.1 HIGH

Adjacent-only WiFi driver flaw (AV:A); no credentials or interaction needed; kernel crash yields high availability loss; minor integrity impact; no confidentiality impact.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H

Primary rating from Vendor (intel).

CVSS VectorVendor: intel

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 17:29 vuln.today

CVE Published

Aug 11, 2026 - 16:27 cve.org

HIGH 8.3

DescriptionCVE.org

Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

AnalysisAI

Kernel-mode denial of service in Intel PROSet/Wireless WiFi Software for Windows allows an adjacent unauthenticated attacker to crash the target system by triggering an improper buffer restriction in the Ring 0 (kernel-level) WiFi driver component. The vulnerability carries a CVSS 4.0 score of 8.3, requires no authentication or user interaction, and is confined to adjacent-network attackers. Intel has acknowledged the issue via security advisory INTEL-SA-01468; no public exploit code exists and no CISA KEV listing has been identified at time of analysis.

Technical ContextAI

The root cause is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a class of flaws where a software component reads or writes memory outside its intended buffer boundaries. The critical aggravating factor here is that the affected code runs at Ring 0 - the Windows kernel privilege ring - meaning the Intel PROSet/Wireless WiFi driver processes wireless frames and associated data with full OS privileges. A buffer restriction violation at this level can corrupt kernel data structures, triggering an unrecoverable kernel panic (Blue Screen of Death on Windows). The CPE string cpe:2.3:a:n/a:intel(r)_proset/wireless_wifi_software_for_windows:*:*:*:*:*:*:*:* uses fully wildcarded version fields, indicating the advisory's scope has not been narrowed to a specific version range in the NVD data. The CVSS 4.0 adjacent attack vector (AV:A) is consistent with a WiFi driver flaw exploitable via crafted wireless frames received over the air or a shared network segment.

RemediationAI

Consult the Intel Security Advisory INTEL-SA-01468 (https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01468.html) for the specific patched version of Intel PROSet/Wireless WiFi Software for Windows; a patch is available per the vendor advisory, but the exact fixed version number is not independently confirmed from the available NVD or CPE data. Updated drivers can typically be obtained through Intel's Download Center, Windows Update, or the device OEM's support site. As a compensating control pending patch deployment, organizations can segment wireless networks using VLAN isolation or restrict access to enterprise SSIDs to reduce the pool of adjacent attackers; this does not eliminate risk but raises the bar for exploitation. Temporarily switching to the Microsoft-inbox WiFi driver (removing Intel PROSet/Wireless) may prevent exploitation of this specific kernel component but will disable Intel-specific wireless management features and should be evaluated for operational impact before deployment.