CVE-2025-27246
BaseFortify
Publication date: 2025-11-11
Last updated on: 2025-11-11
Assigner: Intel Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | processor_identification_utility | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves incorrect default permissions in the Intel Processor Identification Utility before version 8.0.43. It may allow an authenticated user with local access to escalate their privileges through a complex attack that requires active user interaction. This could enable local code execution under certain conditions.
How can this vulnerability impact me? :
The vulnerability can impact the confidentiality, integrity, and availability of the affected system at a high level. It may allow an attacker to execute code locally with escalated privileges, potentially compromising system security and stability.