Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. (CVE-2026-20887)

This vulnerability involves improper access control in Intel Vision software running in Ring 3 user applications. An unauthenticated adversary with low attack complexity may exploit this flaw remotely over a network to cause denial of service or potentially remote code execution. The CVSS 3.1 score is 7.5, reflecting network attack vector, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No patch or remediation information is provided, and no known exploits are reported in the wild.

The vulnerability may allow remote unauthenticated attackers to cause denial of service or remote code execution, impacting system confidentiality with high severity. There is no direct impact on system integrity or availability according to the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time.