CVE-2026-20908: Race Condition
Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20908?
CVE-2026-20908 has a risk rating of 20, indicating critical severity.
How do I fix CVE-2026-20908?
To fix CVE-2026-20908, update to the latest version of the Intel(R) NPU Driver for Windows as recommended by Intel.
What kind of attack can exploit CVE-2026-20908?
CVE-2026-20908 can be exploited by an unprivileged software adversary through a high complexity denial of service attack.
What type of vulnerability is CVE-2026-20908?
CVE-2026-20908 is a time-of-check time-of-use race condition vulnerability.
Who is affected by CVE-2026-20908?
All versions of the Intel(R) NPU Driver for Windows are affected by CVE-2026-20908, especially in user-level applications.