Intel: 25 Coordinated Vulnerabilities Disclosed, Affecting WiFi Software, Processors, and Firmware
Key findings • 25 vulnerabilities disclosed across Intel products between August 11-12, 2026. • High severity vulnerabilities in Intel PROSet/Wireless WiFi Software include buffer overflows a…
Key findings
- 25 vulnerabilities disclosed across Intel products between August 11-12, 2026.
- High severity vulnerabilities in Intel PROSet/Wireless WiFi Software include buffer overflows and improper access controls.
- Multiple privilege escalation and denial-of-service vulnerabilities affect various Intel software and firmware.
- Information disclosure risks present in Intel processors, UEFI firmware, and drivers.
- Prompt patching and updates are recommended for all affected Intel products.
On August 11-12, 2026, a significant batch of 25 vulnerabilities was disclosed across various Intel products, with a notable cluster affecting the Intel PROSet/Wireless WiFi Software for Windows. These vulnerabilities, ranging in severity from Low to High, primarily present risks of denial of service and privilege escalation. The coordinated disclosure highlights potential weaknesses in system software, firmware, and user applications, underscoring the need for prompt patching and security updates.
Several vulnerabilities within the Intel PROSet/Wireless WiFi Software for Windows were disclosed, with three specifically called out in related reporting. These include CVE-2026-24911, a High severity stack-based buffer overflow in the kernel, and CVE-2026-22887, another High severity vulnerability related to improper buffer restrictions in the kernel. Additionally, CVE-2026-24099, a Medium severity use-after-free vulnerability, also affects this software. These issues, often requiring low complexity and local access, could allow unprivileged adversaries to cause denial of service or escalate privileges.
Beyond the WiFi software, other Intel products were impacted by vulnerabilities disclosed in this batch. CVE-2026-12232, a Medium severity vulnerability in the Intel ALH digital-audio-interface driver, stems from an out-of-bounds array indexing. Several other Medium severity vulnerabilities related to privilege escalation were found in various software components, including Intel Transfer Learning Tool (CVE-2026-39452), Intel Extension for PyTorch (CVE-2026-35502), and Intel AI Reference Models (CVE-2026-21400). These often involve issues like improper input validation, uncontrolled search paths, or protection mechanism failures.
Information disclosure vulnerabilities were also present. CVE-2026-20917, a Medium severity vulnerability affecting some Intel Processors, is related to incorrect data forwarding during transient execution. Similarly, CVE-2026-20712, a Medium severity vulnerability in some UEFI firmware for Intel reference platforms, allows for information disclosure due to incomplete cleanup. Another information disclosure vulnerability, CVE-2026-28729, a Low severity integer overflow, was found in the Intel Slim Bootloader UEFI firmware.
The batch also includes vulnerabilities affecting firmware and bootloaders. CVE-2026-28729 and CVE-2026-25194, both Low severity, impact the Intel Slim Bootloader, with the former being an integer overflow leading to potential information disclosure and denial of service, and the latter an out-of-bounds write causing denial of service. CVE-2026-20908, a Medium severity Time-of-check Time-of-use (TOCTOU) race condition in the Intel NPU Driver for Windows, could also lead to denial of service.
Intel has released patches and updates to address these vulnerabilities. Users are strongly advised to update their Intel PROSet/Wireless WiFi Software for Windows, Intel Transfer Learning Tool, Intel Extension for PyTorch, Intel AI Reference Models, Intel Slim Bootloader, and other affected Intel software and firmware to the latest versions. Promptly applying these updates is crucial to mitigate the risks of denial of service and privilege escalation.
This coordinated disclosure of 25 vulnerabilities across Intel's product ecosystem underscores the importance of continuous security monitoring and timely patching. The range of affected components, from processor firmware to user applications, highlights the interconnectedness of system security. Users of Intel products should remain vigilant and ensure their systems are up-to-date to protect against potential exploitation.