CVE Explorer
CVE-2026-20879
Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confident
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
cwe · 2 assertions
{"description":"Denial of Service","lang":"en"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-787","description":"Out-of-bounds Write","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/problemTypes/0/descriptions/1
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Intel(R) Data Center Graphics Driver for VMware ESXi software","vendor":"n/a","versions":[{"status":"affected","version":"before version 2.0.2"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.3,"baseSeverity":"HIGH","privilegesRequired":"HIGH","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
2 source assertions{"description":"Denial of Service","lang":"en"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-787","description":"Out-of-bounds Write","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/problemTypes/0/descriptions/1
Source references
1 source assertion{"name":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01402.html","url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01402.html"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:9477106375a93e2fb7af8cf6697935f716da0ce279f7cf6c7ce3445eafd93515 · sha256:e309e173596e0605… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.