CVE-2025-27246

MediumCVSS 6.7

Published: 11/11/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Incorrect default permissions in Intel Processor Identification Utility before version 8.0.43 within Ring 3 user applications may allow local code execution and privilege escalation. An authenticated user with local access and user interaction could exploit this.

Risk Assessment

Could lead to local code execution and privilege escalation. Impact on confidentiality, integrity, and availability is high.

Recommendation

Update Intel Processor Identification Utility to version 8.0.43 or later. Verify and correct file permissions associated with the tool.

Other vulnerabilities in Intel Processor Identification Utility

CVE-2025-32001Medium
Uncontrolled search path in Intel Processor Identification Utility before version 8.0.43 within Ring 3 user applications may allow privilege escalation. An authenticated user with local access and user interaction could exploit this.

Original NVD description (English source)

Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS