VDB
CVE-2026-20713
CVE-2026-20713
PUBLISHED
CVSS 4.5 MEDIUM
Reported by intel · Published August 11, 2026
Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
Risk Scores
CVSS 4.0
4.5
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts. | See references |
| n/a | Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts. | See references, See references |
| alpine | intel-ucode | 0, 0, 0 |
Timeline
- Aug 11, 2026 CVE Published
- Aug 12, 2026 Coalition ESS Score
- Aug 12, 2026 CVE Updated
- Aug 16, 2026 Security Advisory
- Aug 24, 2026 EPSS Score
- Sep 24, 2026 EPSS Score