CVE-2026-33571 is a denial of service vulnerability in Intel VTune Profiler software before version 2026.0.0. It involves an out-of-bounds read in Ring 1 device drivers. An unprivileged authenticated user with local access and low attack complexity can cause denial of service without user interaction or special internal knowledge. The vulnerability primarily impacts system availability with low confidentiality impact and no integrity impact.
CVE-2026-33567 is an escalation of privilege vulnerability in Intel VTune Profiler software caused by improper input validation. It requires local access by an authenticated user and active user interaction, with a high complexity attack scenario. The vulnerability may impact confidentiality, integrity, and availability of the system at a high level, but no subsequent system-level impacts are expected.
CVE-2026-33563 is an information disclosure vulnerability in Intel(R) Platform Monitoring Technology (Intel(R) PMT) software versions prior to 3.2.0.22. It allows a local, authenticated user with low attack complexity to access sensitive information without requiring user interaction or special internal knowledge. The vulnerability impacts confidentiality to a low degree, with no effect on integrity or availability.
CVE-2026-33279 is a denial of service vulnerability in Intel VTune Profiler software versions before 2026.0.0. It involves an out-of-bounds write in the Ring 1 device drivers. An unprivileged, authenticated local user can exploit this with low complexity and no user interaction. The vulnerability primarily impacts system availability with low potential impact on confidentiality and integrity.
CVE-2026-33270 is a denial of service vulnerability in Intel(R) Graphics Software caused by improper input validation in user applications running in Ring 3. An unprivileged, authenticated user can exploit this vulnerability locally with low attack complexity and no user interaction required. The vulnerability impacts system availability but does not affect confidentiality or integrity.
CVE-2026-33089 is a denial of service vulnerability in Intel(R) CIP software caused by improper input validation within a privileged process (Ring 2). It requires a system software adversary with privileged user access and a low complexity attack, executed locally without user interaction or special internal knowledge. The vulnerability impacts system availability with no direct confidentiality or integrity compromise.
CVE-2026-32672 is a denial of service vulnerability in Intel(R) NPU Drivers before version 32.0.100.4778 caused by a null pointer dereference. It can be triggered by an unprivileged authenticated user with local access and low attack complexity, without requiring user interaction or special internal knowledge. The vulnerability affects system availability but does not impact confidentiality or integrity.
CVE-2026-32670 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Intel VTune Profiler software device drivers running in Ring 1. It allows an unprivileged, authenticated local user to escalate privileges with low attack complexity and no user interaction. The vulnerability impacts confidentiality, integrity, and availability of the system at a high level.
CVE-2026-32667 is an escalation of privilege vulnerability in Intel(R) VTune(TM) Profiler software caused by an out-of-bounds write in Ring 1 device drivers. It can be exploited by an unprivileged, authenticated user with low attack complexity and local access, without requiring user interaction or special internal knowledge. The vulnerability has a high impact on confidentiality, integrity, and availability of the affected system.
CVE-2026-28765 is a denial of service vulnerability in Intel VTune Profiler software before version 2026.0.0. It arises from improper input validation in the Ring 1 device drivers. An unprivileged, authenticated local user can exploit this with low complexity and no user interaction required. The vulnerability impacts system availability but does not affect confidentiality or integrity.
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A prompt-injection payload embedded in fetched documentation can steer the model to call fetch_docs against internal or metadata endpoints and stream the response back into the conversation. This issue has been patched in version 0.7.0.
AMI APTIOV contains vulnerabilities in BIOS where
privileged users may cause the “Heap-based Buffer Overflow” by local access.
Successful exploitation of this vulnerability may lead to a denial of service
during firmware update processing, such as a crash or failed update if the
out-of-bounds write hits unmapped memory. It could also impact Confidentiality,
Integrity, and Availability.
AMI APTIOV contains vulnerabilities in BIOS where
privileged users may cause the “Out-of-Bounds Write” by
local access. Successful exploitation of this vulnerability may lead to a
denial of service during firmware update processing, such as a crash or failed
update if the out-of-bounds write hits unmapped memory. It could also impact Integrity, and Availability.