7.8
High
CVE-2025-20010 Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43…
Description
Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) Processor Identification Utility | Versions not published |
Other CVEs of Intel(R) Processor Identification Utility
The 4 CVEs of Intel(R) Processor Identification Utility →
CVE-2025-32001
Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User…
6.7
Medium
CVE-2025-27246
Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3:…
6.7
Medium
CVE-2020-12335
Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may…
Not rated