{"id":"CVE-2026-33279","kind":"vulnerability","aliases":["CVE-2026-33279"],"related":[],"title":"Intel VTune Profiler: out-of-bounds write in Ring 1 drivers allows local denial of service","description":"Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Intel VTune Profiler before 2026.0.0 has an out-of-bounds write in its Ring 1 device driver component. A local user with an ordinary authenticated account can crash the system with a denial of service.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","intel","linux","local-users","vtune","windows"],"not_affected_if":["version-2026.0.0-or-later","vtune-not-installed"],"how_to_check":"- Check the installed VTune Profiler version in its about dialog or with the installed package manager listing; versions before `2026.0.0` are affected.","fix":"- Intel VTune Profiler: move to `2026.0.0` or later.","status":"open","published_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","triaged_at":"2026-11-10T17:24:04+00:00","updated_at":"2026-11-10T17:24:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T17:24:04Z","model":"claude-haiku-5-5","output":{"fix":"- Intel VTune Profiler: move to `2026.0.0` or later.","reach":"local","title":"Intel VTune Profiler: out-of-bounds write in Ring 1 drivers allows local denial of service","impact":"medium","summary":"Intel VTune Profiler before 2026.0.0 has an out-of-bounds write in its Ring 1 device driver component. A local user with an ordinary authenticated account can crash the system with a denial of service.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","vtune","local-users","windows","linux"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local user crashes the system, causing denial of service","analyst_note":"Confirm the fixed version and affected platforms in Intel's security advisory; the NVD text gives only the 2026.0.0 threshold.","how_to_check":"- Check the installed VTune Profiler version in its about dialog or with the installed package manager listing; versions before `2026.0.0` are affected.\n- unknown","plain_action":"","product_name":"Intel VTune Profiler","needs_analyst":true,"not_affected_if":["vtune-not-installed","version-2026.0.0-or-later"],"who_is_affected":"Systems where Intel VTune Profiler before 2026.0.0 is installed and where a local user with an account can run code. The sources describe local access only and do not say which platforms or configurations are involved. Machines without VTune Profiler installed are not affected.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000755,"input_tokens":4672,"output_tokens":575,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':19A,22A '-33279':20A,23A '1':11A,47B,86C '2026.0.0':36B,83C 'access':120C 'account':58B 'adversari':97C 'allow':13A,90C 'attack':107C,122C 'authent':57B,100C 'avail':147C,162C 'bound':7A,42B,71C 'combin':102C 'complex':106C 'compon':50B 'confidenti':142C,157C 'crash':60B 'cve':18A,21A 'denial':15A,65B,92C,110C 'devic':48B,87C 'driver':12A,49B,88C 'enabl':109C 'high':148C 'impact':140C,164C 'infrastructur':24B 'integr':144C,159C 'intel':1A,25B,32B,75C 'interact':135C 'intern':129C 'knowledg':130C 'linux':26B 'local':14A,28B,52B,119C 'local-us':27B 'low':105C,143C,145C 'may':89C,108C,115C,139C 'none':158C,160C,163C 'occur':117C 'ordinari':56B 'out-of-bound':4A,39B,68C 'potenti':116C,137C 'present':126C 'profil':3A,34B,79C 'r':76C 'requir':123C,132C 'result':114C,153C 'ring':10A,46B,85C 'servic':17A,67B,94C,112C 'softwar':80C,96C 'special':128C 'subsequ':155C 'system':62B,152C,156C 'tm':78C 'unprivileg':95C 'user':29B,53B,101C,134C 'version':82C 'via':118C 'vtune':2A,30B,33B,77C 'vulner':138C,151C 'window':31B 'within':84C 'without':127C 'write':8A,43B,72C","nicknames":[],"mitigations":[],"who_affected":"Systems where Intel VTune Profiler before 2026.0.0 is installed and where a local user with an account can run code. The sources describe local access only and do not say which platforms or configurations are involved. Machines without VTune Profiler installed are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","intel","linux","localusers","medium","vtune","windows"],"campaign_type":null,"search_a":"'-2026':19A,22A '-33279':20A,23A '1':11A 'allow':13A 'bound':7A 'cve':18A,21A 'denial':15A 'driver':12A 'intel':1A 'local':14A 'out-of-bound':4A 'profil':3A 'ring':10A 'servic':17A 'vtune':2A 'write':8A","search_b":"'1':47B '2026.0.0':36B 'account':58B 'authent':57B 'bound':42B 'compon':50B 'crash':60B 'denial':65B 'devic':48B 'driver':49B 'infrastructur':24B 'intel':25B,32B 'linux':26B 'local':28B,52B 'local-us':27B 'ordinari':56B 'out-of-bound':39B 'profil':34B 'ring':46B 'servic':67B 'system':62B 'user':29B,53B 'vtune':30B,33B 'window':31B 'write':43B","search_c":"'1':86C '2026.0.0':83C 'access':120C 'adversari':97C 'allow':90C 'attack':107C,122C 'authent':100C 'avail':147C,162C 'bound':71C 'combin':102C 'complex':106C 'confidenti':142C,157C 'denial':92C,110C 'devic':87C 'driver':88C 'enabl':109C 'high':148C 'impact':140C,164C 'integr':144C,159C 'intel':75C 'interact':135C 'intern':129C 'knowledg':130C 'local':119C 'low':105C,143C,145C 'may':89C,108C,115C,139C 'none':158C,160C,163C 'occur':117C 'out-of-bound':68C 'potenti':116C,137C 'present':126C 'profil':79C 'r':76C 'requir':123C,132C 'result':114C,153C 'ring':85C 'servic':94C,112C 'softwar':80C,96C 'special':128C 'subsequ':155C 'system':152C,156C 'tm':78C 'unprivileg':95C 'user':101C,134C 'version':82C 'via':118C 'vtune':77C 'vulner':138C,151C 'within':84C 'without':127C 'write':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:41+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-33279","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33279","severity":null,"published_at":"2026-11-10T17:17:41+00:00","modified_at":"2026-11-10T17:17:41+00:00","first_seen_at":"2026-11-10T17:22:42+00:00","fetched_at":"2026-11-10T17:22:42+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}