Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-21407

Quick assessment

Affected
n/a Intel(R) Arc(TM) B-series graphics cards
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

某些英特尔® Arc™ B 系列显卡在 Ring 1 环境下存在死锁漏洞,设备驱动程序可能因此导致拒绝服务。拥有已认证用户权限的非特权软件攻击者,结合低复杂度攻击手段,即可触发该拒绝服务。该漏洞可能在攻击者具备特殊内部知识且无需用户交互的情况下,通过本地访问利用。该潜在漏洞对受影响系统的保密性(无影响)、完整性(无影响)和可用性(高影响)构成威胁,进而导致系统后续出现保密性(无影响)、完整性(无影响)和可用性(无影响)的衍生影响。

CVSS 6.8 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-21407

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Intel(R) Arc(TM) B-series graphics cards See references -

II. Public POCs for CVE-2026-21407

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-21407

请登录查看更多情报信息。

Other References for CVE-2026-21407 (1)

Same Patch Batch · n/a · 2026-11-10 · 38 CVEs total

CVE-2026-34016 8.5 HIGH Intel VTune 2026.0.0 前版本竞态条件提权漏洞
CVE-2026-32670 8.5 HIGH Intel VTune Profiler Ring 1 竞态条件提权漏洞
CVE-2026-32667 8.5 HIGH Intel VTune Profiler 越界写入提权漏洞
CVE-2026-50109 8.3 HIGH Intel PCM 越界写漏洞导致拒绝服务
CVE-2026-33279 6.9 MEDIUM Intel VTune 2026.0.0 前版本越界写入漏洞
CVE-2026-33571 6.9 MEDIUM Intel VTune 2026 之前版本越界读取致拒绝服务
CVE-2026-40427 6.9 MEDIUM Intel QuickAssist Windows 驱动存在拒绝服务漏洞
CVE-2026-28743 6.9 MEDIUM Intel VTune 2026.0.0 前版本越界写入致拒绝服务
CVE-2026-28765 6.8 MEDIUM Intel VTune 2026 前版本驱动输入验证拒绝服务漏洞
CVE-2026-40705 6.8 MEDIUM Intel NPU 驱动 32.0.100.4778 前拒绝服务漏洞
CVE-2026-33270 6.8 MEDIUM Intel 图形软件:Ring 3 输入验证不当致拒绝服务
CVE-2026-32672 6.8 MEDIUM Intel NPU 驱动 32.0.100.4778 前空指针解引用漏洞
CVE-2026-33089 6.8 MEDIUM Intel CIP Ring 2 输入验证不当致拒绝服务
CVE-2026-28702 6.3 MEDIUM Intel VTune Profiler 权限配置不当导致提权漏洞
CVE-2026-42067 5.9 MEDIUM Intel TDX 软件证书验证缺陷致权限提升
CVE-2026-35683 5.9 MEDIUM Intel 多缓冲 IPSec 越界写致拒绝服务漏洞
CVE-2026-44627 5.8 MEDIUM Intel oneDNN v2026.0.0 之前整数溢出致拒绝服务漏洞
CVE-2026-40426 5.8 MEDIUM Intel NPU 驱动 1.33.0 前整数下溢致拒绝服务
CVE-2026-40693 5.7 MEDIUM Intel TDX 软件输入验证缺陷致拒绝服务
CVE-2026-39456 5.6 MEDIUM Media Transcode Accelerator 1.0.0 前版本拒绝服务漏洞

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities