Threats Tagged 'cve-2026-20716'

This security update addresses multiple vulnerabilities in Intel CPU microcode, including privilege escalation issues in Ring 0 and System Management Mode (SMM). The update includes microcode releases from Intel dated 2026-08-12, 2026-08-11, 2026-05-12, and 2026-02-27, covering a range of Intel processors such as Core Ultra and Xeon Scalable series. The update fixes functional issues and security vulnerabilities identified by Intel security advisories INTEL-SA-01379, INTEL-SA-01404, INTEL-SA-01420, INTEL-SA-01423, INTEL-SA-01428, INTEL-SA-01435, INTEL-SA-01441, INTEL-SA-01442, and INTEL-SA-01443. Red Hat has issued an important security advisory for microcode_ctl packages in Red Hat Enterprise Linux 8, providing updated microcode to mitigate these vulnerabilities.

CVE-2026-20716 is an improper access control vulnerability affecting some Intel processors at Ring 3, where user applications may escalate privileges. The attack requires local access by an authenticated user and involves high complexity with special internal knowledge. The vulnerability impacts confidentiality and integrity of the system but does not affect availability. No user interaction is required for exploitation. There is no information about available patches or vendor advisories.

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.