Is CVE-2026-60141 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-60141 being exploited in the wild.

How severe is CVE-2026-60141?

Informational severity, published 10 November 2026.

Which products and versions are affected?

Intel Metrics Discovery Application Programming Interface before 1.16.189.

Is there a fix for CVE-2026-60141?

Yes: fixed in 1.16.189 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-60141 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-60141?

Check whether you run Intel Metrics Discovery Application Programming Interface at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-60141: Intel Metrics Discovery API improper null termination denial of service

CVE-2026-60141 · Severity: info · Published 2026-11-10

Intel Metrics Discovery API is a software library used by applications to access performance monitoring data on Intel processors. An improper null termination flaw allows an unprivileged user to crash applications using this API, causing a denial of service. The attack requires local access and authenticated user privileges but no user interaction.

Vendors: Intel.

Quick answers

Is CVE-2026-60141 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-60141 being exploited in the wild.
How severe is CVE-2026-60141?: Informational severity, published 10 November 2026.
Which products and versions are affected?: Intel Metrics Discovery Application Programming Interface before 1.16.189.
Is there a fix for CVE-2026-60141?: Yes: fixed in 1.16.189 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-60141 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-60141?: Check whether you run Intel Metrics Discovery Application Programming Interface at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 1.16.189 or later

Technical details

Improper null termination in Intel Metrics Discovery API (before version 1.16.189) within Ring 3 user-mode applications allows a local denial of service. An unprivileged authenticated attacker with low complexity can trigger the vulnerability via local access with special internal knowledge, resulting in application crashes and availability impact.

Affected products

Intel Metrics Discovery Application Programming Interface before 1.16.189

Timeline

2026-11-10: disclosed

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01565.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.