CVE-2026-24911: Intel PROSet/Wireless WiFi Software stack buffer overflow denial of service

CVE-2026-24911 · Severity: high · CVSS 8.6 · Published 2026-08-11

Technologies: Intel Wi-Fi 7 Be211, Intel Wi-Fi 7 Be200, Intel Wireless Wifi, Intel Killer Wi-Fi 7 Be1775i\/S, Intel Wireless-Ac 9462, Intel Killer Wi-Fi 7 Be1750i\/S, Intel Wi-Fi 7 Be201, Intel Wi-Fi 7 Be213, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Proset\, Intel PROSet/Wireless WiFi Software, Intel Wi-Fi 6 Ax200, Intel Killer Wi-Fi 6e Ax1675x\/W, Intel Wireless-Ac 9560, Intel Wi-Fi 6e Ax211, Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Wireless-Ac 9461, Intel Wi-Fi 6 Ax210, Intel Wi-Fi 6 Ax201, Intel Killer Wi-Fi 7 Be1750x\/W. Vendors: Intel.

Executive brief

Intel PROSet/Wireless WiFi Software is a driver suite that manages WiFi connectivity on Windows systems. A stack-based buffer overflow vulnerability in the kernel-mode component allows an unprivileged attacker on the local network to crash or destabilize the system without authentication, causing service outages and forcing system restarts.

Technical details

This vulnerability is a stack-based buffer overflow (CWE-674) located in the Ring 0 kernel component of Intel PROSet/Wireless WiFi Software for Windows. An unprivileged, unauthenticated attacker can trigger the overflow via adjacent network access (e.g., WiFi network proximity) with low attack complexity and no special privileges required. The flaw allows denial of service by corrupting kernel memory and causing a system crash. No user interaction is needed to exploit the vulnerability. Patches are available from Intel; affected systems should be updated immediately.

Affected products

Intel PROSet/Wireless WiFi Software unspecified versions

Timeline

2026-08-11: disclosed
2026-09-22: advisory: Last revision of INTEL-SA-01468

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01468.html