Intel Quickassist Technology vulnerabilities

CVE-2026-20767 [HIGH] CWE-20 CVE-2026-20767: Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 wit Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access wh

CVE-2026-20714 [HIGH] CWE-787 CVE-2026-20714: Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ri Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when att

CVE-2026-20771 [MEDIUM] CWE-476 CVE-2026-20771: Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 with Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack r

CVE-2026-20905 [MEDIUM] CWE-20 CVE-2026-20905: Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 with Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack re

CVE-2026-20914 [MEDIUM] CWE-476 CVE-2026-20914: Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 wit Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack

CVE-2026-20782 [MEDIUM] CWE-120 CVE-2026-20782: Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3 Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen

CVE-2026-20793 [MEDIUM] CWE-252 CVE-2026-20793: Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack req

CVE-2026-20881 [MEDIUM] CWE-369 CVE-2026-20881: Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirement

CVE-2026-20717 [MEDIUM] CWE-20 CVE-2026-20717: Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 wit Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack r

CVE-2025-27713 [HIGH] CWE-787 CVE-2025-27713: Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requiremen

CVE-2025-33000 [HIGH] CWE-20 CVE-2025-33000: Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requireme

CVE-2025-32088 [MEDIUM] CWE-754 CVE-2025-32088: Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3 Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are

CVE-2025-31937 [MEDIUM] CWE-125 CVE-2025-31937: Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not pr

CVE-2025-27710 [MEDIUM] CWE-822 CVE-2025-27710: Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ri Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requiremen

CVE-2025-30509 [MEDIUM] CWE-20 CVE-2025-30509: Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack req

CVE-2025-32732 [MEDIUM] CWE-120 CVE-2025-32732: Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User App Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present w

CVE-2025-32446 [MEDIUM] CWE-822 CVE-2025-32446: Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 wi Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attac

CVE-2025-24519 [MEDIUM] CWE-120 CVE-2025-24519: Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User App Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are no

CVE-2025-26694 [MEDIUM] CWE-476 CVE-2025-26694: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are

CVE-2025-20090 [MEDIUM] CWE-822 CVE-2025-20090: Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.