CVE-2026-20738

The record

Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Affected packages

Related vulnerabilities

• CVE-2026-83939 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker… CWE-822
• CVE-2026-83498 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave… CWE-822
• CVE-2026-80083 Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute… CWE-822
• CVE-2026-78451 Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an… CWE-822
• CVE-2026-78444 Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker… CWE-822
• CVE-2026-72956 Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized… CWE-822
• CVE-2026-10420 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822
• CVE-2026-82927 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822