CVE-2026-46632
Quick assessment
Affected
n/a Intel(R) Application Optimization User Interface
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
某些英特尔（Intel）应用优化用户界面在 Ring 3 环境下存在不受控的搜索路径漏洞：用户级应用程序可能因此导致权限提升。具备已认证用户身份且攻击复杂度较高的非特权软件攻击者，可能利用此漏洞实现权限提升。该漏洞在满足攻击条件时，可通过本地访问触发，无需特殊的内部知识，但需要用户主动交互。该潜在漏洞可能对受影响系统的机密性（高）、完整性（高）和可用性（高）造成严重影响，进而导致系统后续在机密性（无）、完整性（无）和可用性（无）方面不再受保护。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-46632
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Intel(R) Application Optimization User Interface | See references | - |
|
II. Public POCs for CVE-2026-46632
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-46632
请登录查看更多情报信息。
Other References for CVE-2026-46632 (1)
Same Patch Batch · n/a · 2026-11-10 · 38 CVEs total
| CVE-2026-32670 | 8.5 HIGH | Intel VTune Profiler Ring 1 竞态条件提权漏洞 |
| CVE-2026-34016 | 8.5 HIGH | Intel VTune 2026.0.0 前版本竞态条件提权漏洞 |
| CVE-2026-32667 | 8.5 HIGH | Intel VTune Profiler 越界写入提权漏洞 |
| CVE-2026-50109 | 8.3 HIGH | Intel PCM 越界写漏洞导致拒绝服务 |
| CVE-2026-33279 | 6.9 MEDIUM | Intel VTune 2026.0.0 前版本越界写入漏洞 |
| CVE-2026-33571 | 6.9 MEDIUM | Intel VTune 2026 之前版本越界读取致拒绝服务 |
| CVE-2026-40427 | 6.9 MEDIUM | Intel QuickAssist Windows 驱动存在拒绝服务漏洞 |
| CVE-2026-28743 | 6.9 MEDIUM | Intel VTune 2026.0.0 前版本越界写入致拒绝服务 |
| CVE-2026-33089 | 6.8 MEDIUM | Intel CIP Ring 2 输入验证不当致拒绝服务 |
| CVE-2026-33270 | 6.8 MEDIUM | Intel 图形软件：Ring 3 输入验证不当致拒绝服务 |
| CVE-2026-32672 | 6.8 MEDIUM | Intel NPU 驱动 32.0.100.4778 前空指针解引用漏洞 |
| CVE-2026-28765 | 6.8 MEDIUM | Intel VTune 2026 前版本驱动输入验证拒绝服务漏洞 |
| CVE-2026-40705 | 6.8 MEDIUM | Intel NPU 驱动 32.0.100.4778 前拒绝服务漏洞 |
| CVE-2026-21407 | 6.8 MEDIUM | Intel Arc B 系列显卡驱动死锁导致拒绝服务漏洞 |
| CVE-2026-28702 | 6.3 MEDIUM | Intel VTune Profiler 权限配置不当导致提权漏洞 |
| CVE-2026-35683 | 5.9 MEDIUM | Intel 多缓冲 IPSec 越界写致拒绝服务漏洞 |
| CVE-2026-42067 | 5.9 MEDIUM | Intel TDX 软件证书验证缺陷致权限提升 |
| CVE-2026-40426 | 5.8 MEDIUM | Intel NPU 驱动 1.33.0 前整数下溢致拒绝服务 |
| CVE-2026-44627 | 5.8 MEDIUM | Intel oneDNN v2026.0.0 之前整数溢出致拒绝服务漏洞 |
| CVE-2026-40693 | 5.7 MEDIUM | Intel TDX 软件输入验证缺陷致拒绝服务 |
Showing top 20 of 38 CVEs. View all on vendor page → →