# CVE-2026-20878: Intel PROSet/Wireless WiFi Software null pointer dereference

Source: https://junglewise.ai/threats/cve-2026-20878-intel-proset-wireless-wifi-software-null-pointer-dereference  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-20878 · Severity: high · CVSS 7.4 · Published 2026-08-11

Intel PROSet/Wireless WiFi Software is a driver package for Windows-based systems that manages wireless network connectivity. A null pointer dereference vulnerability in the Ring 2 device driver can be triggered remotely by an unauthenticated network adversary, causing the system to crash and become unavailable. This denial-of-service attack requires no user interaction and can be performed from an adjacent network.

Technologies: [Intel Killer Wi-Fi 6 Ax1650i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-6-ax1650i-s), [Intel Killer Wi-Fi 6e Ax1675i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-6e-ax1675i-s), [Intel Killer Wi-Fi 6e Ax1675x\/W](https://junglewise.ai/threats/technologies/killer-wi-fi-6e-ax1675x-w), [Intel Killer Wi-Fi 7 Be1750i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-7-be1750i-s), [Intel Killer Wi-Fi 7 Be1750x\/W](https://junglewise.ai/threats/technologies/killer-wi-fi-7-be1750x-w), [Intel Killer Wi-Fi 7 Be1775i\/S](https://junglewise.ai/threats/technologies/killer-wi-fi-7-be1775i-s), [Intel PROSet/Wireless WiFi Software](https://junglewise.ai/threats/technologies/proset-wireless-wifi-software), [Intel Proset\](https://junglewise.ai/threats/technologies/proset), [Intel Wi-Fi 6 Ax200](https://junglewise.ai/threats/technologies/wi-fi-6-ax200), [Intel Wi-Fi 6 Ax201](https://junglewise.ai/threats/technologies/wi-fi-6-ax201), [Intel Wi-Fi 6 Ax210](https://junglewise.ai/threats/technologies/wi-fi-6-ax210), [Intel Wi-Fi 6e Ax211](https://junglewise.ai/threats/technologies/wi-fi-6e-ax211), [Intel Wi-Fi 7 Be200](https://junglewise.ai/threats/technologies/wi-fi-7-be200), [Intel Wi-Fi 7 Be201](https://junglewise.ai/threats/technologies/wi-fi-7-be201), [Intel Wi-Fi 7 Be211](https://junglewise.ai/threats/technologies/wi-fi-7-be211), [Intel Wi-Fi 7 Be213](https://junglewise.ai/threats/technologies/wi-fi-7-be213), [Intel Wireless Wifi](https://junglewise.ai/threats/technologies/wireless-wifi), [Intel Wireless-Ac 9461](https://junglewise.ai/threats/technologies/wireless-ac-9461), [Intel Wireless-Ac 9462](https://junglewise.ai/threats/technologies/wireless-ac-9462), [Intel Wireless-Ac 9560](https://junglewise.ai/threats/technologies/wireless-ac-9560). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-20878 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20878 being exploited in the wild.

**How severe is CVE-2026-20878?** High severity, with a CVSS score of 7.4, published 11 August 2026.

**Which products and versions are affected?** Intel PROSet/Wireless WiFi Software affected versions unspecified.

**Is there a fix for CVE-2026-20878?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-20878 attacked?** It is attacked over the network or from the adjacent network.

**Am I affected by CVE-2026-20878?** Check whether you run Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a null pointer dereference vulnerability in Intel PROSet/Wireless WiFi Software's Ring 2 device driver for Windows. The vulnerability is triggered via an adjacent network attack vector (AV:A) with low attack complexity (AC:L) and requires no user interaction or privilege escalation. An unauthenticated network adversary can send specially crafted packets to cause a null pointer dereference, resulting in a kernel-mode crash and denial of service. The vulnerability impacts system availability (VA:H) with minimal secondary impacts. Patches are expected from Intel's security advisory INTEL-SA-01422.

## Affected products

- Intel PROSet/Wireless WiFi Software affected versions unspecified

## Timeline

- 2026-08-11: disclosed: Published via NVD and Intel Security Advisory INTEL-SA-01422

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html)

## Related threats

- [Intel PROSet/Wireless WiFi Software stack buffer overflow denial of service](https://junglewise.ai/threats/cve-2026-24911-intel-proset-wireless-wifi-software-stack-buffer-overflow-denial)
- [Intel PROSet/Wireless WiFi Software use-after-free in kernel](https://junglewise.ai/threats/cve-2026-24099-intel-proset-wireless-wifi-software-use-after-free-in-kernel)
- [Intel PROSet/Wireless WiFi Software improper buffer restrictions denial of service](https://junglewise.ai/threats/cve-2026-22887-intel-proset-wireless-wifi-software-improper-buffer-restrictions)
- [Intel PROSet/Wireless WiFi Software improper authentication in Ring 2 drivers](https://junglewise.ai/threats/cve-2026-20891-intel-proset-wireless-wifi-software-improper-authentication-in)
- [Intel PROSet/Wireless WiFi Software privilege escalation in Ring 2](https://junglewise.ai/threats/cve-2026-20890-intel-proset-wireless-wifi-software-privilege-escalation-in-ring)