CVE-2025-33000CWE-20

CVE-2025-33000

High · published November 11, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

⚡ Improper input validation in Intel QuickAssist Technology could let an authenticated user take control, like a guest gaining access to your secret vault! 🔥 Think of a trusted employee who suddenly finds a way to access the CEO's private documents without any special clearance — that’s what this vulnerability allows! It’s a breach of trust that could open the floodgates to all kinds of chaos. An attacker with local access could escalate privileges to gain full control over the system, leading to devastating outcomes such as unauthorized data access, alteration, or even total service disruption. This could result in a complete compromise of confidentiality, integrity, and availability, leaving your system vulnerable and exposed.

Put simply

Think of a trusted employee who suddenly finds a way to access the CEO's private documents without any special clearance — that’s what this vulnerability allows! It’s a breach of trust that could open the floodgates to all kinds of chaos. This vulnerability stems from improper input validation in Intel QuickAssist Technology before version 2.6.0, allowing a system adversary to exploit authenticated access and execute privilege escalation without needing special internal knowledge.

What to do

An attacker with local access could escalate privileges to gain full control over the system, leading to devastating outcomes such as unauthorized data access, alteration, or even total service disruption. This could result in a complete compromise of confidentiality, integrity, and availability, leaving your system vulnerable and exposed. Immediately upgrade to version 2.6.0 or later to patch this vulnerability. Additionally, review user access controls and audit all systems for any signs of unauthorized access. Ensuring your security policies are up to date is critical! You've got this! By taking action now, you can safeguard your systems and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00140 · 3.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-11-11T22:15Z
Affected products (1)
ProductVersionsFixed in
intel/quickassist_technology< 2.6.0-00182.6.0-0018
References (1)
EPSS history
Timeline
  • 11 NOV 16:51Z
    Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege
    cvelistv5