CVE-2026-20716
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege.
Impact
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Xeon 634 Firmware | All versions |
| Intel | Xeon 636 Firmware | All versions |
| Intel | Xeon 638 Firmware | All versions |
| Intel | Xeon 654 Firmware | All versions |
| Intel | Xeon 656 Firmware | All versions |
| Intel | Xeon 658x Firmware | All versions |
| Intel | Xeon 674x Firmware | All versions |
| Intel | Xeon 676x Firmware | All versions |
| Intel | Xeon 678x Firmware | All versions |
| Intel | Xeon 696x Firmware | All versions |
| Intel | Xeon 698x Firmware | All versions |
| Intel | Xeon 6315p Firmware | All versions |