# CVE-2026-20713: Intel Xeon firmware control flow privilege escalation

Source: https://junglewise.ai/threats/cve-2026-20713-intel-xeon-firmware-control-flow-privilege-escalation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-20713 · Severity: info · CVSS 4.5 · Published 2026-08-11

Intel Xeon processors contain a firmware vulnerability that could allow a privileged attacker on the local system to escalate their privileges further. An exploit requires system-level access, high technical complexity, and knowledge of internal processor details. If successful, an attacker could gain unauthorized read and write access to protected system memory and data.

Technologies: [Intel Xeon 6 processor with P-cores](https://junglewise.ai/threats/technologies/xeon-6-processor-with-p-cores), [Intel Xeon 6 SoC](https://junglewise.ai/threats/technologies/xeon-6-soc). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-20713 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20713 being exploited in the wild.

**How severe is CVE-2026-20713?** Informational severity, with a CVSS score of 4.5, published 11 August 2026.

**Which products and versions are affected?** Intel Xeon 6 Processor with E-cores All versions prior to microcode mitigation; Intel Xeon 6 processor with P-cores All versions prior to microcode mitigation; Intel Xeon 6 SoC All versions prior to microcode mitigation; Intel Xeon Scalable Processor (4th Gen) All versions prior to microcode mitigation; and 2 more.

**Is there a fix for CVE-2026-20713?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-20713 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-20713?** Check whether you run Intel Xeon 6 Processor with E-cores, Intel Xeon 6 processor with P-cores, Intel Xeon 6 SoC or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An always-incorrect control flow implementation in Intel Xeon processor firmware allows privilege escalation when exploited by a system software adversary. The vulnerability requires the attacker to already possess privileged user access and involves a high-complexity local attack with no additional special requirements beyond system knowledge. The root cause stems from improper control flow logic in the processor's firmware that fails to enforce proper access boundaries. Exploitation can result in high impact to system confidentiality and integrity by allowing an attacker to read and modify protected memory regions. Intel is addressing this through microcode updates distributed via system manufacturers.

## Affected products

- Intel Xeon Scalable Processor (4th Gen) All versions prior to microcode mitigation
- Intel Xeon W2400 and W3400 Processors All versions prior to microcode mitigation
- Intel Xeon Scalable Processor (5th Gen) All versions prior to microcode mitigation
- Intel Xeon 6 Processor with P-cores All versions prior to microcode mitigation
- Intel Xeon 6 SoC All versions prior to microcode mitigation
- Intel Xeon 6 Processor with E-cores All versions prior to microcode mitigation

## Timeline

- 2026-08-11: disclosed: Intel PSIRT advisory INTEL-SA-01442 published

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html)

## Related threats

- [Intel Xeon Alias Checking Trusted Module privilege escalation](https://junglewise.ai/threats/cve-2026-20898-intel-xeon-alias-checking-trusted-module-privilege-escalation)
- [Intel TDX module improper authentication in Ring 0](https://junglewise.ai/threats/cve-2026-20885-intel-tdx-module-improper-authentication-in-ring-0)
- [Intel TDX module uncaught exception denial of service](https://junglewise.ai/threats/cve-2026-20775-intel-tdx-module-uncaught-exception-denial-of-service)
- [Intel Processors privilege escalation in Ring 3 user applications](https://junglewise.ai/threats/cve-2026-20716-intel-processors-privilege-escalation-in-ring-3-user-applications)
- [Intel TDX module insecure storage of sensitive information](https://junglewise.ai/threats/cve-2026-20705-intel-tdx-module-insecure-storage-of-sensitive-information)