CVE-2025-32091CWE-276

CVE-2025-32091

High · published November 11, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

⚠️ Default permissions just got exposed! An incorrect setup in Intel's Arc B-series GPU firmware could let a savvy adversary escalate their privileges without breaking a sweat. 🔥 Think of it like a hotel where the housekeeping staff accidentally left the master keycard out on the front desk. With that keycard, anyone could access any room, regardless of their actual booking. That's the risk here—someone with just enough knowledge can stroll right into sensitive areas of your system. This vulnerability could enable attackers to gain unauthorized access, tamper with sensitive data, or disrupt system functions. It’s a triple threat to confidentiality, integrity, and availability—potentially putting your entire system at risk. The consequences could be nothing short of catastrophic for your sensitive information!

Put simply

Think of it like a hotel where the housekeeping staff accidentally left the master keycard out on the front desk. With that keycard, anyone could access any room, regardless of their actual booking. That's the risk here—someone with just enough knowledge can stroll right into sensitive areas of your system. CVE-2025-32091 arises from incorrect default permissions in the device driver firmware for Intel Arc B-series GPUs. This allows a malicious actor with local access and privileged user status to exploit the system without any user interaction, escalating privileges effortlessly.

What to do

This vulnerability could enable attackers to gain unauthorized access, tamper with sensitive data, or disrupt system functions. It’s a triple threat to confidentiality, integrity, and availability—potentially putting your entire system at risk. The consequences could be nothing short of catastrophic for your sensitive information! Immediate patching is crucial—ensure you’re running the latest firmware version provided by Intel. Review your access control settings and tighten permissions to safeguard against unauthorized escalation. Regular audits of your device configurations can help catch these issues early! You’ve got this! By taking action now, you can secure your systems and maintain your hero status in the fight against vulnerabilities! 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-11-11T22:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 16:51Z
    Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege
    cvelistv5