CVE-2026-20716
7.0 ÉlevéeDescription
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Produits concernés
- Intel(R) Processors
- Intel xeon 634 firmware
- Intel xeon 636 firmware
- Intel xeon 638 firmware
- Intel xeon 654 firmware
- Intel xeon 656 firmware
- Intel xeon 658x firmware
- Intel xeon 674x firmware
- Intel xeon 676x firmware
- Intel xeon 678x firmware
- Intel xeon 696x firmware
- Intel xeon 698x firmware
- Intel xeon 6315p firmware
- Intel xeon 6325p firmware
- Intel xeon 6333p firmware
- Intel xeon 6337p firmware
- Intel xeon 6349p firmware
- Intel xeon 6353p firmware
- Intel xeon 6357p firmware
- Intel xeon 6369p firmware
- Intel xeon 6377p firmware
- Intel xeon 6503p firmware
- Intel xeon 6503p-b firmware
- Intel xeon 6505p firmware
- Intel xeon 6507p firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 7.2 Élevée | secure@intel.com | CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 7.0 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |