CVE-2025-20010CWE-1104

CVE-2025-20010

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

⚡ An escalated privilege opportunity could be lurking right under your nose! This vulnerability in Intel's Processor Identification Utility before version 8.0.43 can let attackers level up their access with just a few tricks. 🔥 Think of it like a guest at a hotel who finds an unguarded staff entrance. With a little stealth, they could waltz straight into the back office and access sensitive information without anyone noticing. This vulnerability provides a similar sneaky path for adversaries. If exploited, a local attacker could gain elevated privileges, allowing them to access confidential information, modify system-wide settings, or even disrupt services. The fallout could be catastrophic: your system's confidentiality, integrity, and availability could be severely compromised, leading to absolute chaos!

Put simply

Think of it like a guest at a hotel who finds an unguarded staff entrance. With a little stealth, they could waltz straight into the back office and access sensitive information without anyone noticing. This vulnerability provides a similar sneaky path for adversaries. This vulnerability arises from the use of outdated third-party components in the Intel Processor Identification Utility, where a system software adversary with local access can exploit these components to escalate their privileges without user interaction.

What to do

If exploited, a local attacker could gain elevated privileges, allowing them to access confidential information, modify system-wide settings, or even disrupt services. The fallout could be catastrophic: your system's confidentiality, integrity, and availability could be severely compromised, leading to absolute chaos! To protect against this vulnerability, upgrade to Intel Processor Identification Utility version 8.0.43 or later immediately. It's also wise to conduct an inventory of your system's components to ensure no unmaintained software is present. Regularly review and update all software dependencies to mitigate future risks. You've got this! 🌟 By staying proactive and applying these updates, you'll reinforce your defenses like a security superhero! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-1104 · Use of Unmaintained Third Party Components
Published
2025-11-11T22:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 16:49Z
    Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow…
    cvelistv5