CVE-2026-21399

Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-122
• CWE-122

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01459.html

Published

Aug 11, 2026

Last Modified

Aug 12, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-21386Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.1…4.3
• CVE-2026-21387Protection mechanism failure for some Intel(R) LLM Library f…5.4
• CVE-2026-21388Mattermost Plugins versions <=2.3.1 fail to limit the reques…6.5
• CVE-2026-21389An OS command injection vulnerability exists in XWEB Pro ve…8.8
• CVE-2026-2139A vulnerability was determined in Tenda TX9 up to 22.03.02.1…8.8
• CVE-2026-21393Movable Type contains a stored cross-site scripting vulnerab…5.4
• CVE-2026-2140A vulnerability was identified in Tenda TX9 up to 22.03.02.1…8.8
• CVE-2026-21400Protection mechanism failure for some Intel(R) AI Reference …5.4
• CVE-2026-21404NAVTOR NavBox through version 4.16.1.20 contains hard-coded …6.3
• CVE-2026-21408beat-access for Windows version 3.0.3 and prior contains an …7.3
• CVE-2026-21409Improper authorization vulnerability exists in RICOH Streaml…8.2
• CVE-2026-2141A security flaw has been discovered in WuKongOpenSource Wuko…8.8