# CVE-2026-20798: Intel Graphics Driver uncontrolled search path privilege escalation

Source: https://junglewise.ai/threats/cve-2026-20798-uncontrolled-search-path-for-some-intel-r-graphics-driver  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-20798 · Severity: info · Published 2026-11-10

Intel Graphics Driver software installers contain an uncontrolled search path vulnerability that could allow an authenticated user to escalate their privileges. An attacker with local access and ability to perform specific file system manipulation could gain full system access through the installer process. This affects graphics drivers for Intel Arc, Data Center GPU, and legacy processor-integrated graphics.

Technologies: [Intel Graphics Driver for 7th-10th Gen Core processors](https://junglewise.ai/threats/technologies/graphics-driver-for-7th-10th-gen-core-processors), [Intel Graphics Driver for Arc graphics](https://junglewise.ai/threats/technologies/graphics-driver-for-arc-graphics), [Intel Graphics Driver for Arc Pro graphics](https://junglewise.ai/threats/technologies/graphics-driver-for-arc-pro-graphics), [Intel Graphics Driver for Data Center GPU Flex Series](https://junglewise.ai/threats/technologies/graphics-driver-for-data-center-gpu-flex-series). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-20798 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20798 being exploited in the wild.

**How severe is CVE-2026-20798?** Informational severity, published 10 November 2026.

**Which products and versions are affected?** Intel Graphics Driver for 7th-10th Gen Core processors Before 31.0.101.2141; Intel Graphics Driver for Arc graphics Before 32.0.101.8629; Intel Graphics Driver for Arc Pro graphics Before 32.0.101.8517; Intel Graphics Driver for Atom, Pentium, and Celeron processors Before 31.0.101.2141; and 1 more.

**Is there a fix for CVE-2026-20798?** Yes: fixed in Arc graphics driver 32.0.101.8629 or later; Arc Pro driver 32.0.101.8517 or later; Data Center GPU Flex Series driver 32.0.101.8331 or later; 7th-10th Gen Core/Atom/Pentium/Celeron driver 31.0.101.2141 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-20798 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-20798?** Check whether you run Intel Graphics Driver for 7th-10th Gen Core processors, Intel Graphics Driver for Arc graphics, Intel Graphics Driver for Arc Pro graphics or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Arc graphics driver 32.0.101.8629 or later; Arc Pro driver 32.0.101.8517 or later; Data Center GPU Flex Series driver 32.0.101.8331 or later; 7th-10th Gen Core/Atom/Pentium/Celeron driver 31.0.101.2141 or later

## Technical details

The vulnerability exists in Intel Graphics Driver software installers (Ring 3: User Applications) where the DLL/library search path is not properly controlled, allowing DLL hijacking or similar attacks. Exploitation requires local access, an authenticated user account, high attack complexity, and active user interaction (running the installer). A successful exploit allows local code execution with elevated privileges.

## Affected products

- Intel Graphics Driver for Arc graphics Before 32.0.101.8629
- Intel Graphics Driver for Arc Pro graphics Before 32.0.101.8517
- Intel Graphics Driver for Data Center GPU Flex Series Before 32.0.101.8331
- Intel Graphics Driver for 7th-10th Gen Core processors Before 31.0.101.2141
- Intel Graphics Driver for Atom, Pentium, and Celeron processors Before 31.0.101.2141

## Timeline

- 2026-11-10: disclosed

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01440.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01440.html)

## Related threats

- [Intel libva uncontrolled search path privilege escalation](https://junglewise.ai/threats/cve-2026-56438-uncontrolled-search-path-for-the-libva-software-for-all-versions)
- [Intel Arc B-series graphics device driver deadlock denial of service](https://junglewise.ai/threats/cve-2026-21407-deadlock-for-some-intel-r-arc-tm-b-series-graphics-cards-within)
- [Intel Graphics Driver privilege escalation in software installers](https://junglewise.ai/threats/cve-2026-20880-incorrect-default-permissions-for-some-intel-r-graphics-driver)
- [Intel Graphics Driver privilege escalation in installer permissions](https://junglewise.ai/threats/cve-2026-20756-incorrect-default-permissions-for-some-intel-r-graphics-driver)