Is CVE-2026-32672 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-32672 being exploited in the wild.

How severe is CVE-2026-32672?

Informational severity, published 10 November 2026.

Which products and versions are affected?

Intel NPU Driver for Windows before 32.0.100.4778.

Is there a fix for CVE-2026-32672?

Yes: fixed in 32.0.100.4778. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-32672 attacked?

It is attacked with local access.

Am I affected by CVE-2026-32672?

Check whether you run Intel NPU Driver for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-32672: Intel NPU Driver null pointer dereference denial of service

CVE-2026-32672 · Severity: info · Published 2026-11-10

Intel NPU (Neural Processing Unit) drivers are software components that enable applications to use specialized AI hardware on Windows and Linux systems. A null pointer dereference vulnerability in these drivers allows an authenticated local attacker to crash the system or cause it to become unresponsive, disrupting operations. The vulnerability affects the Windows driver before version 32.0.100.4778 and requires an attacker to already have user-level access to the system.

Technologies: Intel NPU Driver for Windows. Vendors: Intel.

Quick answers

Is CVE-2026-32672 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-32672 being exploited in the wild.
How severe is CVE-2026-32672?: Informational severity, published 10 November 2026.
Which products and versions are affected?: Intel NPU Driver for Windows before 32.0.100.4778.
Is there a fix for CVE-2026-32672?: Yes: fixed in 32.0.100.4778. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-32672 attacked?: It is attacked with local access.
Am I affected by CVE-2026-32672?: Check whether you run Intel NPU Driver for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 32.0.100.4778

Technical details

A null pointer dereference in Intel NPU Drivers (Ring 1: Device Drivers) before version 32.0.100.4778 allows denial of service via local attack vector. An authenticated attacker with low privilege can trigger the vulnerability through a low-complexity attack without user interaction, causing system availability impact (VA:H). The vulnerability requires local access but does not compromise confidentiality or integrity.

Affected products

Intel NPU Driver for Windows before 32.0.100.4778

Timeline

2026-11-10: disclosed

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01521.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.