CVE-2025-24491
BaseFortify
Publication date: 2025-11-11
Last updated on: 2025-11-11
Assigner: Intel Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | killer_performance_suite | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an uncontrolled search path issue in some versions of Intel(R) Killer(TM) Performance Suite software before version 4.0 40.25.509.1465. It exists within Ring 3 (User Applications) and may allow an attacker with limited privileges and an authenticated user account to escalate their privileges on the system. The attack requires local access, active user interaction, and is considered high complexity. Essentially, it means that malicious software or users could exploit the way the software searches for files or resources to gain higher access rights than intended.
How can this vulnerability impact me? :
This vulnerability can impact the confidentiality, integrity, and availability of the affected system at a high level. An attacker exploiting this flaw could escalate their privileges, potentially gaining unauthorized access to sensitive information, modifying system data, or disrupting system operations. However, the vulnerability requires local access, an authenticated user, and active user interaction, making exploitation more complex.