On May 2026 Patch Tuesday, Intel and AMD published over two dozen advisories addressing 70 vulnerabilities in their products. Intel disclosed 13 advisories covering 24 defects, including a critical buffer overflow (CVE-2026-20794, CVSS 9.3) in the Data Center Graphics Driver for VMware ESXi that could be exploited for privilege escalation and code execution. Additional high-severity Intel flaws involve out-of-bounds read/write leading to denial of service and potential data corruption. AMD released 15 advisories covering 45 vulnerabilities, including a critical flaw (CVE-2026-0481, CVSS 9.2) in the AMD Device Metrics Exporter that exposes a network port allowing unauthenticated remote access to GPU configuration, risking availability loss. Other AMD issues include high-severity vulnerabilities affecting processors, drivers, and software tools that could result in privilege escalation, arbitrary code execution, or unauthorized data access. The advisories cover a broad range of components such as firmware, drivers, and management utilities. No exploits in the wild have been reported. Patch availability is implied but not explicitly confirmed in the source content; users should verify with vendor advisories.

The vulnerabilities include critical buffer overflow and unrestricted network access flaws that could allow attackers to escalate privileges, execute arbitrary code, cause denial of service, or access sensitive data. The Intel critical vulnerability affects the Data Center Graphics Driver for VMware ESXi, potentially impacting virtualization environments. The AMD critical vulnerability allows unauthenticated remote access to GPU configuration via an exposed network port, risking denial of service. High-severity vulnerabilities in both vendors' products could lead to privilege escalation, arbitrary code execution, and data disclosure or corruption. No known active exploitation has been reported, but the potential impact on data center and cloud environments is significant.

Patch status is not explicitly confirmed in the provided source. Users should consult the official Intel and AMD security advisories linked in the source article to obtain and apply the relevant patches. Given the critical nature of some vulnerabilities, timely application of vendor updates is strongly recommended. Monitor vendor communications for any updates on exploit activity or additional mitigation guidance.