The vulnerability identified as CVE-2026-32791 affects Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604. It is an untrusted search path issue within Ring 3, where user applications may escalate privileges by exploiting how the software locates and loads resources. The attack scenario involves a local unprivileged adversary with authenticated user access, requiring high attack complexity and passive user interaction. The CVSS 3.1 score is 7.0, indicating a medium severity with high impact on confidentiality, integrity, and availability within the vulnerable component. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

If exploited, this vulnerability could allow an unprivileged local user to escalate privileges on the affected system. The CVSS score rates confidentiality, integrity, and availability impacts as high within the vulnerable component. However, the description clarifies that there are no subsequent impacts on overall system confidentiality, integrity, or availability. This suggests the impact is contained within the affected application context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, limiting local user access and monitoring for suspicious activity related to Intel(R) PCM usage may be prudent, but no specific mitigations are detailed by the vendor.