CVE-2026-20795

HighCVSS 7.4/10Last modified Aug 26, 2026

Description

Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Aug 11, 2026
Last modified: Aug 26, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-207963.1Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated CVE-2026-207979.8A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stac CVE-2026-207995.4Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an esca CVE-2026-20807.2A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The ma CVE-2026-208006.5Gitea's notification API does not re-validate repository access permissions when returning notification details. After a user's access to a CVE-2026-208015.6Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integr CVE-2026-208037.2Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-208047.7Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.CVE-2026-208055.5Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information CVE-2026-208065.5Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally.CVE-2026-208087.0Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authoriz CVE-2026-208097.8Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.