{"id":"CVE-2026-44606","kind":"vulnerability","aliases":["CVE-2026-44606"],"related":[],"title":"Intel Intelligent Storage Acceleration Library: out-of-bounds write lets local user escalate privilege","description":"Out-of-bounds write for some Intel(R) Intelligent Storage Acceleration Library within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"An out-of-bounds write in some Intel Intelligent Storage Acceleration Library code running in user mode can let a local, authenticated user escalate privileges. The sources describe high impact to confidentiality, integrity and availability on the affected system.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","intel","linux","storage","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","triaged_at":"2026-11-10T18:25:12+00:00","updated_at":"2026-11-10T18:25:12+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T18:25:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel Intelligent Storage Acceleration Library: out-of-bounds write lets local user escalate privilege","impact":"high","summary":"An out-of-bounds write in some Intel Intelligent Storage Acceleration Library code running in user mode can let a local, authenticated user escalate privileges. The sources describe high impact to confidentiality, integrity and availability on the affected system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","linux","windows","storage"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Find Intel's advisory for CVE-2026-44606 to get affected versions, fixed versions and the exact passive user interaction required.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems with Intel Intelligent Storage Acceleration Library installed where local users can run applications. The sources do not list affected versions or specific configurations, so the exact exposure is unknown.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000687,"input_tokens":4665,"output_tokens":440,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-44606':18A,21A '3':82C 'acceler':4A,38B,78C 'access':116C 'adversari':93C 'affect':65B 'allow':86C 'applic':84C 'attack':103C,118C 'authent':49B,96C 'avail':62B,142C,157C 'bound':9A,31B,70C 'code':40B 'combin':98C 'complex':102C 'confidenti':59B,137C,152C 'cve':16A,19A 'describ':55B 'enabl':105C 'escal':14A,51B,88C,106C 'high':56B,138C,140C,143C 'impact':57B,135C,159C 'infrastructur':22B 'integr':60B,139C,154C 'intel':1A,23B,35B,74C 'intellig':2A,36B,76C 'interact':130C 'intern':124C 'knowledg':125C 'let':11A,46B 'librari':5A,39B,79C 'linux':24B 'local':12A,48B,115C 'low':101C 'may':85C,104C,111C,134C 'mode':44B 'none':153C,155C,158C 'occur':113C 'out-of-bound':6A,28B,67C 'passiv':128C 'potenti':112C,132C 'present':121C 'privileg':15A,52B,90C,108C 'r':75C 'requir':119C,127C 'result':110C,148C 'ring':81C 'run':41B 'softwar':92C 'sourc':54B 'special':123C 'storag':3A,25B,37B,77C 'subsequ':150C 'system':66B,147C,151C 'unprivileg':91C 'user':13A,43B,50B,83C,97C,129C 'via':114C 'vulner':133C,146C 'window':26B 'within':80C 'without':122C 'write':10A,32B,71C","nicknames":[],"mitigations":[],"who_affected":"Systems with Intel Intelligent Storage Acceleration Library installed where local users can run applications. The sources do not list affected versions or specific configurations, so the exact exposure is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","intel","linux","medium","storage","windows"],"campaign_type":null,"search_a":"'-2026':17A,20A '-44606':18A,21A 'acceler':4A 'bound':9A 'cve':16A,19A 'escal':14A 'intel':1A 'intellig':2A 'let':11A 'librari':5A 'local':12A 'out-of-bound':6A 'privileg':15A 'storag':3A 'user':13A 'write':10A","search_b":"'acceler':38B 'affect':65B 'authent':49B 'avail':62B 'bound':31B 'code':40B 'confidenti':59B 'describ':55B 'escal':51B 'high':56B 'impact':57B 'infrastructur':22B 'integr':60B 'intel':23B,35B 'intellig':36B 'let':46B 'librari':39B 'linux':24B 'local':48B 'mode':44B 'out-of-bound':28B 'privileg':52B 'run':41B 'sourc':54B 'storag':25B,37B 'system':66B 'user':43B,50B 'window':26B 'write':32B","search_c":"'3':82C 'acceler':78C 'access':116C 'adversari':93C 'allow':86C 'applic':84C 'attack':103C,118C 'authent':96C 'avail':142C,157C 'bound':70C 'combin':98C 'complex':102C 'confidenti':137C,152C 'enabl':105C 'escal':88C,106C 'high':138C,140C,143C 'impact':135C,159C 'integr':139C,154C 'intel':74C 'intellig':76C 'interact':130C 'intern':124C 'knowledg':125C 'librari':79C 'local':115C 'low':101C 'may':85C,104C,111C,134C 'none':153C,155C,158C 'occur':113C 'out-of-bound':67C 'passiv':128C 'potenti':112C,132C 'present':121C 'privileg':90C,108C 'r':75C 'requir':119C,127C 'result':110C,148C 'ring':81C 'softwar':92C 'special':123C 'storag':77C 'subsequ':150C 'system':147C,151C 'unprivileg':91C 'user':83C,97C,129C 'via':114C 'vulner':133C,146C 'within':80C 'without':122C 'write':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-44606","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44606","severity":null,"published_at":"2026-11-10T18:17:39+00:00","modified_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","fetched_at":"2026-11-10T18:22:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}