CVE-2026-20727: Intel PROSet/Wireless WiFi Software null pointer dereference denial of service

CVE-2026-20727 · Severity: high · CVSS 8.6 · Published 2026-08-11

Intel PROSet/Wireless WiFi Software is a driver and management suite for wireless network adapters on Windows systems. A null pointer dereference in the kernel-mode component can be triggered by an unauthenticated attacker over the network, causing the system to crash and become unavailable. This vulnerability requires no special privileges or user interaction, making it a straightforward avenue for attackers to cause service disruptions.

Technologies: Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W, Intel Killer Wi-Fi 7 Be1750i\/S, Intel Killer Wi-Fi 7 Be1750x\/W, Intel Killer Wi-Fi 7 Be1775i\/S, Intel PROSet/Wireless WiFi Software, Intel Proset\, Intel Wi-Fi 6 Ax200, Intel Wi-Fi 6 Ax201, Intel Wi-Fi 6 Ax210, Intel Wi-Fi 6e Ax211, Intel Wi-Fi 7 Be200, Intel Wi-Fi 7 Be201, Intel Wi-Fi 7 Be211, Intel Wi-Fi 7 Be213, Intel Wireless Wifi, Intel Wireless-Ac 9461, Intel Wireless-Ac 9462, Intel Wireless-Ac 9560. Vendors: Intel.

Quick answers

Is CVE-2026-20727 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-20727 being exploited in the wild.
How severe is CVE-2026-20727?
High severity, with a CVSS score of 8.6, published 11 August 2026.
Which products and versions are affected?
Intel PROSet/Wireless WiFi Software Windows versions prior to patched release (specific versions not disclosed in advisory).
Is there a fix for CVE-2026-20727?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-20727 attacked?
It is attacked from the adjacent network.
Am I affected by CVE-2026-20727?
Check whether you run Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-20727 is a null pointer dereference vulnerability in the Ring 0 kernel component of Intel PROSet/Wireless WiFi Software for Windows. The vulnerability can be triggered via an adjacent network attack (CVSS AV:A) by an unprivileged, unauthenticated adversary with low attack complexity and no special requirements. An attacker can send specially crafted network packets to exploit the null pointer dereference, causing a kernel panic or system crash, resulting in denial of service. The attack requires no user interaction. Patches are available from Intel; affected users should update to the latest version of PROSet/Wireless WiFi Software.

Affected products

  • Intel PROSet/Wireless WiFi Software Windows versions prior to patched release (specific versions not disclosed in advisory)

Timeline

  • 2026-08-11: disclosed
  • 2026-08-11: advisory: INTEL-SA-01468 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.