CVE-2026-50177 is a denial of service vulnerability in Intel(R) Neural Compressor software versions before 3.8. It arises from deserialization of untrusted data in user applications running in Ring 3. The attack requires local access by an authenticated user with low complexity and no user interaction. The vulnerability impacts system availability with low severity and does not affect confidentiality or integrity significantly.
CVE-2026-50109 is a denial of service vulnerability in Intel(R) Performance Counter Monitor (Intel(R) PCM) caused by an out-of-bounds write in user space (Ring 3). An unprivileged, unauthenticated attacker with low complexity can exploit this vulnerability remotely, potentially via network access, without requiring user interaction. The vulnerability primarily impacts system availability with no direct confidentiality or integrity compromise reported.
CVE-2026-49028 is a denial of service vulnerability in Intel(R) Neural Compressor software versions before 3.8. It arises from deserialization of untrusted data in user applications running in Ring 3. An unprivileged, authenticated local user can exploit this with low complexity and no user interaction required. The vulnerability impacts system availability with low severity and does not affect confidentiality or integrity significantly.
CVE-2026-46632 is a medium severity escalation of privilege vulnerability in the Intel(R) Application Optimization User Interface. It involves an uncontrolled search path in user applications running in Ring 3, which may allow an unprivileged, authenticated user to escalate privileges. Exploitation requires local access, high attack complexity, and active user interaction. The vulnerability potentially impacts confidentiality, integrity, and availability at a high level, but no subsequent system-level impacts are confirmed.
CVE-2026-44627 is a denial of service vulnerability in Intel oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0. It arises from an integer overflow leading to a buffer overflow, which can be triggered by an unprivileged authenticated user with local access. The attack requires low complexity and no user interaction. The vulnerability primarily impacts system availability with low potential impact on confidentiality and integrity.
CVE-2026-42966 is an escalation of privilege vulnerability in Intel(R) Neural Compressor software versions before 3.8. It involves an uncaught exception in user applications running in Ring 3 that may allow an authenticated, unprivileged local user to escalate privileges with low complexity and no user interaction. The vulnerability has low potential impact on confidentiality, integrity, and availability of the system, with no subsequent system-level impacts reported.
CVE-2026-42917 is a denial of service vulnerability in Intel(R) Neural Compressor software versions before 3.8. It arises from deserialization of untrusted data in user applications running in Ring 3. An unprivileged, authenticated local user can exploit this with low complexity and no user interaction required. The vulnerability primarily affects system availability with low impact on integrity and no impact on confidentiality.
CVE-2026-42067 is an escalation of privilege vulnerability in Intel(R) TDX Workload Attestation software caused by improper certificate validation. It affects user applications running in Ring 3 and may allow an unprivileged, unauthenticated local attacker to manipulate data with low attack complexity and no user interaction. The vulnerability impacts the integrity of the system but does not affect confidentiality or availability. No known exploits are reported in the wild, and no affected versions or patches are specified.
CVE-2026-41214 is a denial of service vulnerability in Intel(R) Neural Compressor software versions before 3.8. It arises from improper input validation in user applications running in Ring 3. An unprivileged authenticated user with local access and low attack complexity can trigger this denial of service without requiring user interaction or special internal knowledge. The vulnerability impacts availability with low severity and does not affect confidentiality or integrity significantly.
CVE-2026-40705 is a denial of service vulnerability in Intel(R) NPU Drivers prior to version 32.0.100.4778 caused by improper resource locking. An unprivileged, authenticated local user can exploit this with low complexity and no user interaction to cause system availability disruption. There are no impacts to confidentiality or integrity.
CVE-2026-40704 is a medium-severity escalation of privilege vulnerability in Intel Neural Compressor software before the master version. It involves a protection mechanism failure in Ring 3, allowing an unprivileged software adversary with a privileged user to potentially escalate privileges via local access with low complexity and passive user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level within the vulnerable system context.
A race condition vulnerability (CWE-367) exists in the J2Store extension for Joomla versions 6.0.0 through 6.6.5. This flaw allows a logged-in customer to redeem a single-use gift voucher or coupon multiple times by initiating multiple checkout sessions concurrently and confirming them before any are submitted. The balance and usage checks only consider orders beyond the "New" state, enabling repeated use of vouchers or coupons intended for one-time use.
CVE-2026-40693 is a denial of service vulnerability in Intel(R) TDX Workload Attestation software caused by improper input validation. An unprivileged, authenticated local user with high attack complexity can trigger this issue without requiring user interaction. The vulnerability impacts system availability but does not affect confidentiality or integrity.
CVE-2026-40427 is a use-after-free vulnerability in the Intel QuickAssist Technology Driver for Windows that can be exploited by an unprivileged authenticated user to cause a denial of service. The attack requires local access and low complexity, with no user interaction needed. The vulnerability primarily impacts system availability with no direct confidentiality or integrity compromise beyond availability loss.
CVE-2026-40426 is an integer underflow vulnerability in Intel(R) NPU Driver software versions before 1.33.0. It allows an unprivileged authenticated user to cause a denial of service via local access without requiring user interaction. The vulnerability impacts system availability with low potential impact on confidentiality and integrity.
CVE-2026-40065 is an escalation of privilege vulnerability in Intel(R) Neural Compressor software versions before v3.7. It arises from improper input validation within Ring 3 user applications. An unprivileged adversary with some privileged user access and low attack complexity may exploit this locally with passive user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level according to CVSS metrics. No patch or fixed versions are explicitly stated in the provided data.
CVE-2026-39456 is a denial of service vulnerability in the Media Transcode Accelerator before version 1.0.0-00128. It arises from improper input validation within Ring 3 user applications. Exploitation requires a privileged user with local access and high attack complexity, without user interaction or special internal knowledge. The vulnerability impacts system availability but does not affect confidentiality or integrity.
CVE-2026-35683 is a denial of service vulnerability in Intel(R) Multi-Buffer Crypto for IPSec. It involves an out-of-bounds write in user-space components that can be triggered by an unprivileged, unauthenticated local attacker without user interaction. The vulnerability impacts system availability with no direct confidentiality or integrity compromise beyond availability effects.
CVE-2026-35060 is a low-severity escalation of privilege vulnerability in AI Playground software versions before v3.1.1-beta. It involves missing authentication for a critical function within Ring 3: User Applications, allowing an authenticated but unprivileged user to potentially escalate privileges via a low complexity local attack without user interaction. The vulnerability impacts confidentiality and integrity at a low level, with no availability impact. No known exploits or patches are currently documented.
CVE-2026-34016 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Intel VTune Profiler software prior to version 2026.0.0. It allows an authenticated, unprivileged local user to escalate privileges via a low complexity attack without user interaction or special internal knowledge. The vulnerability affects the device drivers running in Ring 1 and poses high impact risks to confidentiality, integrity, and availability of the vulnerable system.