CVE-2026-20745: Intel PROSet/Wireless WiFi Software out-of-bounds write in device drivers

CVE-2026-20745 · Severity: high · CVSS 7.4 · Published 2026-08-11

Intel PROSet/Wireless WiFi Software includes device drivers that connect Windows computers to wireless networks. A network-based attacker can trigger an out-of-bounds memory write in these drivers without authentication, causing the system to crash or become unresponsive. The vulnerability requires the attacker to be on the same network segment (adjacent access) but no special privileges or user interaction.

Technologies: Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W, Intel Killer Wi-Fi 7 Be1750i\/S, Intel Killer Wi-Fi 7 Be1750x\/W, Intel Killer Wi-Fi 7 Be1775i\/S, Intel PROSet/Wireless WiFi Software, Intel Proset\, Intel Wi-Fi 6 Ax200, Intel Wi-Fi 6 Ax201, Intel Wi-Fi 6 Ax210, Intel Wi-Fi 6e Ax211, Intel Wi-Fi 7 Be200, Intel Wi-Fi 7 Be201, Intel Wi-Fi 7 Be211, Intel Wi-Fi 7 Be213, Intel Wireless Wifi, Intel Wireless-Ac 9461, Intel Wireless-Ac 9462, Intel Wireless-Ac 9560. Vendors: Intel.

Quick answers

Is CVE-2026-20745 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-20745 being exploited in the wild.
How severe is CVE-2026-20745?
High severity, with a CVSS score of 7.4, published 11 August 2026.
Which products and versions are affected?
Intel PROSet/Wireless WiFi Software some versions for Windows.
Is there a fix for CVE-2026-20745?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-20745 attacked?
It is attacked over the network or from the adjacent network, in device firmware.
Am I affected by CVE-2026-20745?
Check whether you run Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds write vulnerability exists in the Ring 2 device drivers of Intel PROSet/Wireless WiFi Software for Windows (CVE-2026-20745). The flaw allows an unauthenticated network adversary with adjacent access to trigger a denial of service condition. Attack complexity is low and no user interaction is required. The vulnerability impacts system availability (high) and has minor integrity implications; confidentiality is not affected. Patches are available from Intel.

Affected products

  • Intel PROSet/Wireless WiFi Software some versions for Windows

Timeline

  • 2026-08-11: disclosed
  • 2026-08-11: advisory: INTEL-SA-01422

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.