CVE-2026-40433

HighCVSS 8.5/10Last modified Nov 12, 2026

Description

Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (high) impacts.

Metrics

CVSS 4.0 8.5/10CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-404348.1Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same nCVE-2026-404355.3When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses.  NotCVE-2026-404367.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly CVE-2026-40443.8A vulnerability was detected in projectsend up to r1945. This affects the function realpath of the file /import-orphans.php of the componentCVE-2026-404469.8Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.ThisCVE-2026-404477.5Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115aCVE-2026-404485.3Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung OCVE-2026-404496.6Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source OCVE-2026-40453.7A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file includes/Classes/Auth.php. Executing a manipuCVE-2026-404506.6Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption fCVE-2026-404515.1DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to eCVE-2026-404527.5Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes last-
CVE-2026-40433: High severity, CVSS 8.5 | Vulnix