CVE-2025-32001
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Uncontrolled search path in Intel Processor Identification Utility before version 8.0.43 within Ring 3 user applications may allow privilege escalation. An authenticated user with local access and user interaction could exploit this.
Risk Assessment
Could lead to privilege escalation and system compromise. Impact on confidentiality, integrity, and availability is high.
Recommendation
Update Intel Processor Identification Utility to version 8.0.43 or later. Restrict local access to trusted users.
Other vulnerabilities in Intel Processor Identification Utility
Original NVD description (English source)
Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS