ZDI-CAN-28889 HIGH 7.8 Upcoming Feb 05, 2026

Intel

Intel, a major semiconductor and processor manufacturer, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication, potentially allowing attackers with local access to compromise system confidentiality, integrity, and availability. The flaw was discovered by Michael DePlante and reported in February 2026 with a patch deadline of June 2026. Security teams should monitor Intel's advisory channels closely for patch releases and prioritize updates for systems where local user access is a concern, particularly in multi-user environments.

Advisory Details
Researcher Michael DePlante (@izobashi) of TrendAI Zero Day Initiative
Reported February 05, 2026
Deadline June 05, 2026 50d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy