Is CVE-2026-20783 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-20783 being exploited in the wild.

How severe is CVE-2026-20783?

Medium severity, with a CVSS score of 6.1, published 11 August 2026.

Which products and versions are affected?

Intel NPU Driver for Linux before 1.32.0; Intel NPU Driver for Windows before 32.0.100.4723.

Is there a fix for CVE-2026-20783?

A patch was published on 2026-08-11: Patches released: Linux NPU Driver 1.32.0+, Windows NPU Driver 32.0.100.4723+ Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-20783 attacked?

It is attacked with local access.

Am I affected by CVE-2026-20783?

Check whether you run Intel NPU Driver for Linux or Intel NPU Driver for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20783: Intel NPU Driver improper conditions check in firmware

CVE-2026-20783 · Severity: medium · CVSS 6.1 · Published 2026-08-11

Intel's Neural Processing Unit (NPU) Driver, a component used to interface with AI acceleration hardware on computers, contains a flaw in its firmware that can allow an authenticated user to crash the system or make it unresponsive. An attacker with local access and existing user privileges could exploit this condition-checking bug to trigger a denial of service, impacting system availability and potentially causing data loss from unexpected shutdowns.

Technologies: Intel NPU Driver for Linux, Intel NPU Driver for Windows. Vendors: Intel.

Quick answers

Is CVE-2026-20783 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-20783 being exploited in the wild.
How severe is CVE-2026-20783?: Medium severity, with a CVSS score of 6.1, published 11 August 2026.
Which products and versions are affected?: Intel NPU Driver for Linux before 1.32.0; Intel NPU Driver for Windows before 32.0.100.4723.
Is there a fix for CVE-2026-20783?: A patch was published on 2026-08-11: Patches released: Linux NPU Driver 1.32.0+, Windows NPU Driver 32.0.100.4723+ Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-20783 attacked?: It is attacked with local access.
Am I affected by CVE-2026-20783?: Check whether you run Intel NPU Driver for Linux or Intel NPU Driver for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-20783 is an improper conditions check vulnerability in the firmware layer (Ring 1: Device Drivers) of Intel's NPU Driver affecting all versions. The flaw allows an authenticated local adversary with low-complexity attack requirements to trigger a denial of service condition. Attack vector is local with low attack complexity and low privileges required; no user interaction is needed. An attacker can exploit this via local access to crash or hang the system, impacting availability (high severity per CVSS). Patches are available: Linux version 1.32.0 or later and Windows version 32.0.100.4723 or later.

Affected products

Intel NPU Driver for Linux before 1.32.0
Intel NPU Driver for Windows before 32.0.100.4723

Timeline

2026-08-11: disclosed: INTEL-SA-01456 advisory published
2026-08-11: patched: Patches released: Linux NPU Driver 1.32.0+, Windows NPU Driver 32.0.100.4723+

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01456.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.