Threats Tagged 'cve-2026-20772'

An uncontrolled search path vulnerability exists in some Intel Connectivity Performance Suite software installers before version 50.25.1121.193. This flaw may allow a local, authenticated, unprivileged user to escalate privileges through a complex attack requiring active user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level within the vulnerable system. No known exploits are reported in the wild, and the vulnerability does not affect cloud services.

CVE-2026-20772 is a medium severity vulnerability in Intel Connectivity Performance Suite software installers before version 50.25.1121.193. It involves an uncontrolled search path in user-level applications (Ring 3) that may allow an authenticated, unprivileged user to escalate privileges through a complex attack requiring active user interaction and local access. The vulnerability impacts confidentiality, integrity, and availability at a high level during the attack but does not result in subsequent system-wide impacts. No official patch or remediation guidance is currently provided by the vendor.