PT-2025-46433 · Intel · Intel Quickassist Technology

CVE-2025-33000 · Publicado 2025-11-11 · Atualizado 2025-11-26

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel QuickAssist Technology versions prior to 2.6.0

Description A flaw exists in Intel QuickAssist Technology that, due to improper input validation within Ring 3 User Applications, could allow an attacker to escalate privileges. A system software adversary with authenticated user access and a low complexity attack may exploit this issue. This requires local access and does not need user interaction. The issue may impact the confidentiality, integrity, and availability of the system.

Recommendations Update to version 2.6.0 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-33000

Produtos afetados

Intel Quickassist Technology

Referências · 7

• https://twitter.com/CveTodo/status/1988308508937232452 · Publicação no Twitter
• https://t.me/cveNotify/144105 · Publicação no Telegram
• https://twitter.com/CveFindCom/status/1988331556222452177 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-33000 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1988303448409076160 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-33000 · Aviso do Fabricante