PT-2026-40318 · Intel · Qat Software Drivers For Windows

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-20767

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel(R) QAT software drivers for Windows versions prior to 1.13

Description Improper input validation within Ring 3: User Applications may allow an authenticated, unprivileged software adversary to achieve escalation of privilege. This issue can be triggered via local access with low complexity, requiring no user interaction or special internal knowledge. Successful exploitation could lead to a high impact on the confidentiality, integrity, and availability of the affected system.

Recommendations Update Intel(R) QAT software drivers for Windows to version 1.13 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-20767

Affected Products

Qat Software Drivers For Windows

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20767 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01387.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2054340983559438466 · Twitter Post