{"id":"CVE-2026-20716","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-20716","generatedAt":"2026-10-28T02:20:12.838Z","title":"Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege.","description":"Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","published":"2026-08-11T17:17:50.000Z","lastModified":"2026-08-31T14:10:11.000Z","status":"Analyzed","sourceIdentifier":"secure@intel.com","cvss":{"version":"4.0","score":7.2,"severity":"HIGH","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-284"],"affected":["intel/xeon 634 firmware","intel/xeon 636 firmware","intel/xeon 638 firmware","intel/xeon 654 firmware","intel/xeon 656 firmware","intel/xeon 658x firmware","intel/xeon 674x firmware","intel/xeon 676x firmware","intel/xeon 678x firmware","intel/xeon 696x firmware","intel/xeon 698x firmware","intel/xeon 6315p firmware","intel/xeon 6325p firmware","intel/xeon 6333p firmware","intel/xeon 6337p firmware","intel/xeon 6349p firmware","intel/xeon 6353p firmware","intel/xeon 6357p firmware","intel/xeon 6369p firmware","intel/xeon 6377p firmware","intel/xeon 6503p firmware","intel/xeon 6503p-b firmware","intel/xeon 6505p firmware","intel/xeon 6507p firmware","intel/xeon 6511p firmware","intel/xeon 6513p-b firmware","intel/xeon 6515p firmware","intel/xeon 6516p-b firmware","intel/xeon 6517p firmware","intel/xeon 6518p-b firmware","intel/xeon 6520p firmware","intel/xeon 6521p firmware","intel/xeon 6523p-b firmware","intel/xeon 6527p firmware","intel/xeon 6530p firmware","intel/xeon 6532p-b firmware","intel/xeon 6533p-b firmware","intel/xeon 6543p-b firmware","intel/xeon 6544p-b firmware","intel/xeon 6546p-b firmware","intel/xeon 6548p-b firmware","intel/xeon 6553p-b firmware","intel/xeon 6556p-b firmware","intel/xeon 6563p-b firmware","intel/xeon 6706p-b firmware","intel/xeon 6710e firmware","intel/xeon 6714p firmware","intel/xeon 6716p-b firmware","intel/xeon 6718p-b firmware","intel/xeon 6724p firmware","intel/xeon 6725p firmware","intel/xeon 6726p-b firmware","intel/xeon 6728p firmware","intel/xeon 6730p firmware","intel/xeon 6731e firmware","intel/xeon 6731p firmware","intel/xeon 6732p firmware","intel/xeon 6736p firmware","intel/xeon 6737p firmware","intel/xeon 6738p firmware"],"epss":{"score":0.0009,"percentile":0.00414,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.09%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01435.html","tags":["Vendor Advisory"],"source":"secure@intel.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-20716","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}