CVE-2025-35973
Received Received - Intake

Privilege Escalation in Intel Processors

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Intel Corporation

Description
Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2025-35973
EUVD
EUVD-2025-210692

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel processors *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-229 The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper handling of values in some Intel processors at the kernel or hypervisor level. It allows an authorized attacker with privileged access to escalate privileges through a complex local attack requiring special internal knowledge and no user interaction. The attack can impact system confidentiality and integrity at low levels initially, but may lead to high impacts on confidentiality and integrity later.

Detection Guidance

Detection of this vulnerability requires specialized knowledge and tools due to its complex nature. Intel recommends monitoring for unusual privilege escalation patterns or unauthorized kernel modifications. Check system logs for unexpected changes in Ring 0 access or hypervisor behavior. Use processor-specific diagnostic tools provided by Intel to verify microcode versions and potential vulnerabilities.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain higher privileges on your system, potentially leading to unauthorized access or control. Since it requires privileged user access and complex conditions, typical users are less likely to be directly affected unless attackers already have some level of system access.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR or HIPAA. Organizations must address it to maintain data protection standards and avoid potential regulatory penalties.

Mitigation Strategies

Apply the latest Intel processor microcode updates and BIOS/UEFI firmware patches immediately. Ensure all privileged user accounts follow strict access controls and least-privilege principles. Monitor system integrity with trusted tools and restrict local access to authorized personnel only. Review and update kernel hardening configurations to limit attack surfaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-35973. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart