Detections
Analytics

Intel® PROSet/Wireless WiFi Software x < 24.50.0 Multiple Vulnerabilities

high Nessus Plugin ID 380360

Synopsis

The Intel wireless network adapter driver installed on the remote host is affected by multiple vulnerabilities.

Description

A wireless network adapter driver on the remote host is affected by multiple security vulnerabilities:

 - Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0:
 Kernel may allow a denial of service. (CVE-2026-40433)

 - Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. (CVE-2026-42056, CVE-2026-42956)

 - Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.
 (CVE-2026-44625)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update your network adapter software as per the advisory.

See Also

http://www.nessus.org/u?e2712268

Plugin Details

Severity: High

ID: 380360

File Name: intel_sa_01530_wlan.nasl

Version: 1.1

Type: Local

Agent: windows

Family: Windows

Published: 11/13/2026

Updated: 11/13/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.12

CVSS v4

Risk Factor: High

Base Score: 8.5

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Vulnerability Information

CPE: cpe:/a:intel:proset%2fwireless_wifi, cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated

Patch Publication Date: 11/10/2026

Vulnerability Publication Date: 11/10/2026

Reference Information

CVE: CVE-2026-33275, CVE-2026-40433, CVE-2026-40626, CVE-2026-40695, CVE-2026-40697, CVE-2026-42056, CVE-2026-42956, CVE-2026-44382, CVE-2026-44625

IAVA: 2026-A-1290