CVE-2026-20887High· 7.5▾ Twilight

Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

May 12, 2026

Updated

Aug 31, 2026

CVSS

7.5

Vendor

intel

Product

vision

CWE

CWE-284

Depth score

41 · Moderate

EPSS

0.46% · p40

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS history

Exploit-prediction probability, daily snapshots since Aug 31.

0.5% → 0.5%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 111 days

May 12, 2026Published
Disclosed via NVD
Aug 31, 2026Record revised
Last analysed / modified upstream
Aug 31, 2026EPSS first tracked
0.5%

intel CWE-284 #nvd

Affected

vision

Full technical detail▾

Overview

Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable remote code execution. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Affected

vision

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

[email protected] — https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01457.html

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd

← Back to feed

CVE-2026-20887High· 7.5▾ Twilight

Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

May 12, 2026

Updated

Aug 31, 2026

CVSS

7.5

Vendor

intel

Product

vision

CWE

CWE-284

Depth score

41 · Moderate

EPSS

0.46% · p40

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS history

Exploit-prediction probability, daily snapshots since Aug 31.

0.5% → 0.5%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 111 days

May 12, 2026Published
Disclosed via NVD
Aug 31, 2026Record revised
Last analysed / modified upstream
Aug 31, 2026EPSS first tracked
0.5%

intel CWE-284 #nvd

Affected

vision

Full technical detail▾

Overview

Affected

vision

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

[email protected] — https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01457.html

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd