Intel & AMD Patch Over 80 Vulnerabilities in August 2026

Executive Summary

As part of the August 2026 Patch Tuesday cycle, chipmakers Intel and AMD have released a substantial number of security updates, collectively addressing more than 80 vulnerabilities. The flaws affect a broad spectrum of products, from consumer-grade hardware to enterprise data center components and AI development platforms. The patched vulnerabilities include high-severity issues that could allow for privilege escalation, denial of service (DoS), information disclosure, and arbitrary code execution. Given the foundational role these components play in modern computing, organizations are strongly advised to prioritize the review and deployment of these critical patches.

Vulnerabilities Addressed

Intel Intel published 42 security advisories addressing 72 unique CVEs. Key highlights include:

• High-Severity Flaws: Several high-severity vulnerabilities were patched in Intel PROSet/Wireless WiFi software, which could allow for privilege escalation or DoS attacks.
• Processor & Firmware Flaws: Fixes were issued for Xeon processors, Active Management Technology (AMT), Converged Security and Management Engine (CSME), and Server Platform Services (SPS), primarily mitigating privilege escalation and information disclosure risks.
• AI Software: Multiple vulnerabilities were addressed in Intel's AI development tools, including the Transfer Learning Tool and the Extension for PyTorch.

AMD AMD released five advisories covering approximately 12 vulnerabilities. Key highlights include:

• High-Severity Flaws: Five high-severity vulnerabilities were patched in the AMD Vitis development environment, which could lead to arbitrary code execution, privilege escalation, and private key disclosure (CVE-2026-6726, CVE-2026-6727).
• Platform Utilities: Arbitrary code execution flaws were fixed in the Ryzen Master Utility.
• Hardware Mitigations: Further guidance was provided for mitigating the "PowerHooK" side-channel attack against AMD's Secure Encrypted Virtualization (SEV) technology.

Affected Products

The list of affected products is extensive and spans both companies' portfolios:

• Intel: PROSet/Wireless WiFi, Xeon processors, Data Center Attestation Primitives, TDX, Active Management Technology (AMT), CSME, SPS, and various AI development tools.
• AMD: Vitis development environment, Ryzen Master Utility, SEV-SNP, Power Design Manager, and a wide range of Ryzen CPUs (from 3000 series to the latest AI 300/400 series).

Impact Assessment

The vulnerabilities patched in this cycle could have significant security implications. Flaws in firmware and processors can be particularly dangerous as they operate at a high privilege level, and successful exploitation can lead to a complete system takeover that is difficult to detect. Vulnerabilities in networking components like WiFi drivers can provide an entry point for attackers on the local network, while flaws in AI development tools could compromise the integrity of machine learning models or lead to supply chain attacks. The broad impact across consumer, enterprise, and data center products necessitates a comprehensive patching strategy for all organizations.

Deployment Priority

Given the severity of many of the patched flaws, organizations should prioritize patching based on risk:

1. Internet-Facing Systems: Any systems with affected components exposed to the internet should be patched first.
2. Critical Infrastructure: Servers, hypervisors, and critical workstations running on affected Intel or AMD hardware.
3. Developer Systems: Workstations using affected development tools like AMD Vitis or Intel's AI extensions.
4. General Endpoints: The broader fleet of laptops and desktops, particularly those with vulnerable WiFi drivers.

Cyber Observables — Hunting Hints

The following indicators could help identify unpatched systems or active exploitation:

Detection Methods

• Asset Inventory & Vulnerability Management: The primary method of detection is to maintain a comprehensive asset inventory and use vulnerability scanning tools to identify systems running affected product versions. This is a form of D3FEND's Software Update (D3-SU) process.
• Firmware Version Checking: Use vendor tools (e.g., Intel CSME Version Detection Tool) or system management software to audit and verify firmware versions against the patched versions listed in the advisories.
• Endpoint Monitoring: Monitor for anomalous behavior on systems with vulnerable components, such as unexpected process executions, privilege escalations, or system instability.

Remediation Steps

• Apply Updates: Visit the official security advisory pages for Intel and AMD to identify the specific updates relevant to your environment.
• Follow Vendor Guidance: Apply the firmware, driver, and software updates as recommended by the manufacturers. For firmware updates, follow established procedures carefully to avoid bricking devices.
• Test Patches: Before widespread deployment, test the patches in a controlled environment to ensure they do not cause operational issues.
• Review Mitigations: For vulnerabilities like "PowerHooK" where a full patch may not be available, review and implement the mitigation guidance provided by AMD.