CVE WatchAug 11, 2026

CVE-2026-20878

Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of ser

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-476

EPSS · 30d

Not enough EPSS history yet.

Technical description

Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

Official references

intel.comhttps://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-656817.5 HIG

—

———Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.6h CVE-2026-627026.8 MED

—

———Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.6h CVE-2026-613456.5 MED

—

———Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.6h CVE-2026-591386.5 MED

—

———Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.6h CVE-2026-591327.5 HIG

—

———Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.6h CVE-2026-484387.5 HIG

—

———CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.6h