CVE-2026-20728: Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: Use
Summary
A protection mechanism failure in Intel Extension for TensorFlow (a library that adds TensorFlow AI capabilities to Intel systems) before version 2.15.0.3 could allow someone with basic system access to gain higher-level privileges, potentially compromising the confidentiality, integrity, and availability of the system. The attack requires local access and low complexity, with passive user interaction.
Solution / Mitigation
Update Intel Extension for TensorFlow to version 2.15.0.3 or later.
Vulnerability Details
EPSS: 0.0%
August 11, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-47482: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory
CVE-2022-29200: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implem
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-20728
First tracked: August 11, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 85%