# CVE-2026-20751: Intel Data Center Graphics Driver for VMware ESXi out-of-bounds read

Source: https://junglewise.ai/threats/cve-2026-20751-intel-data-center-graphics-driver-for-vmware-esxi-out-of-bounds  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

CVE-2026-20751 · Severity: info · CVSS 8.3 · Published 2026-05-12

A vulnerability in the Intel Data Center Graphics Driver for VMware ESXi could allow a privileged user to crash the system or access sensitive information. This driver is responsible for managing graphics hardware within virtualized data center environments. An exploit could lead to a denial of service or the exposure of data that should otherwise be protected from the user.

Technologies: [Intel Data Center Graphics Driver for VMware ESXi](https://junglewise.ai/threats/technologies/data-center-graphics-driver-for-vmware-esxi). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-20751 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20751 being exploited in the wild.

**How severe is CVE-2026-20751?** Informational severity, with a CVSS score of 8.3, published 12 May 2026.

**Which products and versions are affected?** Intel Data Center Graphics Driver for VMware ESXi before 2.0.2.

**Is there a fix for CVE-2026-20751?** A patch was published on 2026-05-12: Fixed in version 2.0.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-20751 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-20751?** Check whether you run Intel Data Center Graphics Driver for VMware ESXi at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An out-of-bounds read vulnerability (CWE-125) exists within the Ring 1 device driver component of the Intel Data Center Graphics Driver for VMware ESXi. The flaw is triggered when the driver reads data outside the intended buffer boundaries. A local attacker with high privileges (system software adversary) can exploit this with low complexity to cause a denial of service or gain unauthorized access to sensitive system information. The vulnerability has been addressed in version 2.0.2 of the driver.

## Affected products

- Intel Data Center Graphics Driver for VMware ESXi before 2.0.2

## Timeline

- 2026-05-12: disclosed
- 2026-05-12: advisory
- 2026-05-12: patched: Fixed in version 2.0.2

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01402.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01402.html)

## Related threats

- [Intel Data Center Graphics Driver out-of-bounds write in VMware ESXi](https://junglewise.ai/threats/cve-2026-20879-intel-data-center-graphics-driver-out-of-bounds-write-in-vmware)
- [Intel Data Center Graphics Driver for VMware ESXi buffer overflow](https://junglewise.ai/threats/cve-2026-20794-intel-data-center-graphics-driver-for-vmware-esxi-buffer-overflow)