SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-26257

Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.

MEDIUM 5.5EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.19% probability · 9th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-119
Affected
intel/wi-fi 6 ax411 firmware · intel/wi-fi 6 ax211 firmware · intel/wi-fi 6 ax210 firmware · intel/wi-fi 6 ax201 firmware · intel/wi-fi 6 ax200 firmware · intel/wireless-ac 9560 firmware · intel/wireless-ac 9462 firmware · intel/wireless-ac 9461 firmware · intel/wireless-ac 9260 firmware · intel/dual band wireless-ac 8265 firmware · intel/dual band wireless-ac 8260 firmware · intel/dual band wireless-ac 3168 firmware · intel/wireless 7265 firmware · intel/dual band wireless-ac 3165 firmware · intel/killer wi-fi 6e ax1690 firmware · intel/killer wi-fi 6e ax1675 firmware · intel/killer wi-fi 6 ax1650 firmware · intel/killer wireless-ac 1550 firmware
Source
secure@intel.com
EPSS trend
0%3%5%26 October 2026: 0.19%26 October 202626 October 2026

EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.