PT-2026-40093 · Intel · Data Center Graphics Driver For Vmware Esxi

Published 2026-05-12 · Updated 2026-05-14 · CVE-2026-20794

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Intel(R) Data Center Graphics Driver for VMware ESXi versions prior to 2.0.2

Description A buffer overflow in the Ring 1: Device Drivers may allow a privileged local attacker to escalate privileges and execute arbitrary code. This issue can be triggered via local access without requiring user interaction or special internal knowledge, potentially impacting the confidentiality, integrity, and availability of the system.

Recommendations Update to version 2.0.2 or later.

Fix

LPE

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2026-20794

Affected Products

Data Center Graphics Driver For Vmware Esxi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-20794 · Security Note
• https://reddit.com/r/pwnhub/comments/1tbxmgb/major_security_update_intel_and_amd_address_70 · Reddit Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01402.html · Note
• https://twitter.com/UpwindMDR/status/2054295060728975830 · Twitter Post
• https://twitter.com/ElusivePrivacy/status/2055017641073652083 · Twitter Post