1. Home
  2. CVE Database
  3. CVE-2026-20716
HIGH · 7.0

CVE-2026-20716

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high co...

Vulnerability Description

Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelXeon 634 Firmware-
IntelXeon 634-
IntelXeon 636 Firmware-
IntelXeon 636-
IntelXeon 638 Firmware-
IntelXeon 638-
IntelXeon 654 Firmware-
IntelXeon 654-
IntelXeon 656 Firmware-
IntelXeon 656-
IntelXeon 658X Firmware-
IntelXeon 658X-
IntelXeon 674X Firmware-
IntelXeon 674X-
IntelXeon 676X Firmware-
IntelXeon 676X-
IntelXeon 678X Firmware-
IntelXeon 678X-
IntelXeon 696X Firmware-
IntelXeon 696X-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2026-20716?

CVE-2026-20716 is a vulnerability with a CVSS score of 7.0 (HIGH). Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high co...

How severe is CVE-2026-20716?

CVE-2026-20716 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-20716?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Xeon 634 Firmware, Intel Xeon 634, Intel Xeon 636 Firmware, Intel Xeon 636, Intel Xeon 638 Firmware.