CVE-2026-20878 - Vulnerability Details

- Unsupported Pointer Dereference in Intel PROSet/Wireless WiFi Driver Leads to Denial of Service

Description

Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

Published: 2026-08-11

Score: 7.1 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A null pointer dereference in the device driver of Intel PROSet/Wireless WiFi Software for Windows can be triggered by an unauthenticated network adversary with a low complexity attack, allowing the driver to crash and resulting in a denial of service. The vulnerability does not affect data confidentiality or integrity, but it severely compromises system availability.

Affected Systems

All versions of Intel PROSet/Wireless WiFi Software for Windows that incorporate the vulnerable driver are impacted. Specific build numbers are not provided, so any installation prior to the official fix may be susceptible.

Risk and Exploitability

The CVSS score is 7.1 and the EPSS probability is less than 1 %. The vulnerability is not listed in CISA KEV. Attackers who can send data to the target from a network level, without authentication and without special internal knowledge, can potentially trigger the null pointer dereference. The attack requires no user interaction; an unauthenticated user with a low‑complexity attack could reach the vulnerable driver, possibly via adjacent access when attack requirements are not present. While the probability of exploitation is low, the impact on system availability warrants remediation.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

Intel(R) PROSet/Wireless WiFi Software for Windows

unaffected

Version	Status	Constraints
`See references`	affected	—

Configuration 1 [-]

AND

cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:killer_wi-fi_6_ax1650i\/s:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_6e_ax1675i\/s:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_6e_ax1675x\/w:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_7_be1750i\/s:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_7_be1750x\/w:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_7_be1775i\/s:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax200:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax201:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax210:-:::::::*
	cpe:2.3:h:intel:wi-fi_6e_ax211:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be200:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be201:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be211:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be213:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9461:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9462:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9560:-:::::::*

No data.

Vendor Product Confidence Versions

Intel

Intel Proset Wireless Wifi Software For Windows

100%

Version	Status	Scheme	Platform
`—`	affected	—	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Obtain and install the latest Intel PROSet/Wireless WiFi Software for Windows update that contains the fix for the null pointer dereference.
If no patch is available, temporarily disable the Intel PROSet/Wireless WiFi driver or disable Wi‑Fi functionality that relies on it until a fix is released.
Configure Windows Defender Firewall or other network controls to block inbound traffic on the ports used by the driver interface, reducing the chance of an unauthenticated network adversary triggering the flaw.

Generated by OpenCVE AI on August 13, 2026 at 02:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact Low

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00219.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html

History

Tue, 01 Sep 2026 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Intel killer Wi-fi 6 Ax1650i\/s Intel killer Wi-fi 6e Ax1675i\/s Intel killer Wi-fi 6e Ax1675x\/w Intel killer Wi-fi 7 Be1750i\/s Intel killer Wi-fi 7 Be1750x\/w Intel killer Wi-fi 7 Be1775i\/s Intel proset\/wireless Wifi Intel wi-fi 6 Ax200 Intel wi-fi 6 Ax201 Intel wi-fi 6 Ax210 Intel wi-fi 6e Ax211 Intel wi-fi 7 Be200 Intel wi-fi 7 Be201 Intel wi-fi 7 Be211 Intel wi-fi 7 Be213 Intel wireless-ac 9461 Intel wireless-ac 9462 Intel wireless-ac 9560
CPEs		cpe:2.3:a:intel:proset\/wireless_wifi:::::::: cpe:2.3:h:intel:killer_wi-fi_6_ax1650i\/s:-:::::::* cpe:2.3:h:intel:killer_wi-fi_6e_ax1675i\/s:-:::::::* cpe:2.3:h:intel:killer_wi-fi_6e_ax1675x\/w:-:::::::* cpe:2.3:h:intel:killer_wi-fi_7_be1750i\/s:-:::::::* cpe:2.3:h:intel:killer_wi-fi_7_be1750x\/w:-:::::::* cpe:2.3:h:intel:killer_wi-fi_7_be1775i\/s:-:::::::* cpe:2.3:h:intel:wi-fi_6_ax200:-:::::::* cpe:2.3:h:intel:wi-fi_6_ax201:-:::::::* cpe:2.3:h:intel:wi-fi_6_ax210:-:::::::* cpe:2.3:h:intel:wi-fi_6e_ax211:-:::::::* cpe:2.3:h:intel:wi-fi_7_be200:-:::::::* cpe:2.3:h:intel:wi-fi_7_be201:-:::::::* cpe:2.3:h:intel:wi-fi_7_be211:-:::::::* cpe:2.3:h:intel:wi-fi_7_be213:-:::::::* cpe:2.3:h:intel:wireless-ac_9461:-:::::::* cpe:2.3:h:intel:wireless-ac_9462:-:::::::* cpe:2.3:h:intel:wireless-ac_9560:-:::::::*
Vendors & Products		Intel killer Wi-fi 6 Ax1650i\/s Intel killer Wi-fi 6e Ax1675i\/s Intel killer Wi-fi 6e Ax1675x\/w Intel killer Wi-fi 7 Be1750i\/s Intel killer Wi-fi 7 Be1750x\/w Intel killer Wi-fi 7 Be1775i\/s Intel proset\/wireless Wifi Intel wi-fi 6 Ax200 Intel wi-fi 6 Ax201 Intel wi-fi 6 Ax210 Intel wi-fi 6e Ax211 Intel wi-fi 7 Be200 Intel wi-fi 7 Be201 Intel wi-fi 7 Be211 Intel wi-fi 7 Be213 Intel wireless-ac 9461 Intel wireless-ac 9462 Intel wireless-ac 9560
Metrics		cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}`

Thu, 13 Aug 2026 11:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Intel Intel intel Proset Wireless Wifi Software For Windows
Vendors & Products		Intel Intel intel Proset Wireless Wifi Software For Windows

Thu, 13 Aug 2026 03:00:00 +0000

Type	Values Removed	Values Added
Title		Unsupported Pointer Dereference in Intel PROSet/Wireless WiFi Driver Leads to Denial of Service

Wed, 12 Aug 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 11 Aug 2026 17:00:00 +0000

Type	Values Removed	Values Added
Description		Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.
Weaknesses		CWE-476
References		https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html
Metrics		cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L'}`

Subscriptions

Intel Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s Killer Wi-fi 6e Ax1675x\/w Killer Wi-fi 7 Be1750i\/s Killer Wi-fi 7 Be1750x\/w Killer Wi-fi 7 Be1775i\/s Proset\/wireless Wifi Wi-fi 6 Ax200 Wi-fi 6 Ax201 Wi-fi 6 Ax210 Wi-fi 6e Ax211 Wi-fi 7 Be200 Wi-fi 7 Be201 Wi-fi 7 Be211 Wi-fi 7 Be213 Wireless-ac 9461 Wireless-ac 9462 Wireless-ac 9560

MITRE

Status: PUBLISHED

Assigner: intel

Published: 2026-08-11T16:26:48.726Z

Updated: 2026-08-12T15:36:22.124Z

Reserved: 2025-12-03T17:59:50.518Z

Link: CVE-2026-20878

Vulnrichment

Updated: 2026-08-12T15:36:18.292Z

NVD

Status : Analyzed

Published: 2026-08-11T17:17:53.723

Modified: 2026-09-01T15:09:58.467

Link: CVE-2026-20878

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-13T10:40:40Z

Weaknesses

CWE-476
NULL Pointer Dereference

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact Low

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object