CVE-2026-20890 is a high severity (CVSS 7.3 in the record) flaw in Intel PROSet/Wireless Wi-Fi software for Windows: a privileged process that does not manage privileges correctly. It can lead to escalation of privilege. Intel's fix is PROSet/Wireless Wi-Fi software version 24.30 or later, so update the driver package.
What's affected
The record lists Intel PROSet/Wireless WiFi software and the Killer Wi-Fi 6, 6E and 7 adapters, plus the Wi-Fi 6 AX200. Intel's advisory (INTEL-SA-01468) lists the affected adapters as the Wireless-AC 9461, 9462 and 9560, Wi-Fi 6 AX201, Wi-Fi 6E AX210 and AX211, Wi-Fi 7 BE200, BE201, BE211 and BE213, and the matching Killer models. The AX200 appears in the record but not in the advisory page we read, so check Intel's page if you have that card.
The fixed version in the advisory is PROSet/Wireless Wi-Fi software 24.30 or later. Note that a sister advisory, INTEL-SA-01422, names 24.10 for its Wi-Fi flaws, while this one names 24.30. Installing 24.30 or later satisfies both.
Where the sources differ: Intel's advisory scores it 7.1 (High) using CVSS 4.0. The NVD record scores it 7.3 (High) using CVSS 3.1. The numbers differ because the two versions of CVSS are built differently, so quote the version you are citing.
The weakness is CWE-269 (improper privilege management). The attacker model in the record is a local, unprivileged user, with a high complexity attack. The KEV flag is false and Intel's page we read does not report exploitation.
How to check if you're exposed
On a Windows laptop, open Device Manager, expand Network adapters, open the Intel Wi-Fi adapter and read the driver version on the Driver tab. From a command prompt you can also run:
netsh wlan show drivers
The output shows the driver version and date. Intel's software package version (for example 24.10) and the driver version number are not the same string, so match them using Intel's download page and release notes. Endpoint management tools can list the installed Intel Wi-Fi package across a fleet. Safeguard's free in-browser dependency scan at gold.safeguard.sh/scan covers application dependencies, so it will not see operating system, firmware or driver issues like this one. For those, rely on your asset inventory and the vendor advisory.
What to do now
- Pull a list of Windows endpoints with Intel Wi-Fi adapters from your endpoint tool.
- Download PROSet/Wireless Wi-Fi software 24.30 or later from Intel's Download Center, or take the driver through your PC maker's update channel.
- Deploy to pilot machines first, since Wi-Fi drivers affect connectivity.
- Roll out to the rest, prioritising laptops that join public or shared networks.
- Verify the driver version on a sample of machines afterward.
- Keep the Windows Update driver channel on for new devices, so fresh builds do not ship an old driver.
Why it matters
The weakness here is CWE-269 (improper privilege management): a privileged process that does not manage privileges correctly. Wi-Fi drivers run with high privilege because they sit between the radio and the operating system, so a mistake in them is worth more than a mistake in an ordinary program. Intel places this one in a driver or privileged process (Ring 2).
The record's attacker model is a local, unprivileged user, with a high complexity attack. The stated result is escalation of privilege. For adjacent attackers that means being within radio range or on the same network segment, which is realistic in offices, airports and cafes. For local attackers it means a foothold on the laptop first. Neither is a reason to panic, and both are good reasons to take the driver update through your normal channel soon.
This is one of a set of Wi-Fi software fixes Intel shipped together, including CVE-2026-20737 and CVE-2026-20739, so one driver update closes several at once.
Quick check
Which version fixes this?
Intel's advisory names PROSet/Wireless Wi-Fi software 24.30 or later. Confirm on the advisory page for your adapter.
The record and Intel show different scores. Which should I use?
Intel scores it 7.1 with CVSS 4.0 and the record gives 7.3 with CVSS 3.1. Both describe the same flaw. Say which version you cite, and plan the update either way.
Sources
Last reviewed: 18 October 2026.
