Intel PCM Untrusted Search Path Local Privilege Escalation (CVE-2026-32791)

Vulnerability Overview Vulnerability Name: Intel® Performance Counter Monitor (Intel® PCM) Software Advisory CVE ID: CVE-2026-32791 Severity Level: Medium (MEDIUM) CVSS Base Score: 5.4 CVSS Vector: CVSS:4.0/AVL/AC:H/AT:N/PR:L/UI:R/V:C/VH/VA:H/SC:N/S:N/S:N Description: Certain versions of Intel® Performance Counter Monitor (Intel® PCM) software prior to version label 202604 contain an untrusted search path vulnerability that could lead to privilege escalation. An unauthorized attacker with access via authenticated user combinations may achieve privilege escalation in Ring 3 through high-complexity attack paths. This vulnerability can be exploited via local access and requires specific internal knowledge along with passive user interaction when the attack vector is not present. The potential impact affects system Confidentiality (High), Integrity (High), and Availability (High). Affected Products Affected Products: All versions of Intel® Performance Counter Monitor (Intel® PCM) prior to version label 202604. Release Date: April 6, 2026 Remediation Recommended Actions: Intel recommends updating Intel® Performance Counter Monitor (Intel® PCM) software to version label 202604 or later. Update Download: The update is available for download at: https://github.com/intel/pcm/releases Additional Information Acknowledgments: Intel thanks @00sean for reporting this issue. Disclosure Policy: Intel follows a coordinated disclosure policy, publicly disclosing cybersecurity vulnerabilities only after mitigation measures have been provided. Revision History Revision: 1.0 Date: August 11, 2026 Description: Initial release --- Legal Notice and Disclaimer: The bottom of the page contains Intel's legal notices and disclaimers regarding product warranties, technical support, performance specifications, and other relevant content. Reporting Vulnerabilities: Provides information on how to report security issues related to Intel-branded products or technologies, including links for submitting reports and contact details. Product Support: Provides information on obtaining product support, updates, and patches, as well as links to access support downloads.

Goal Reached Thanks to every supporter — we hit 100%!

Intel PCM Untrusted Search Path Local Privilege Escalation (CVE-2026-32791)