PT-2025-46405 · Intel · Intel Processor Identification Utility

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-27246

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Processor Identification Utility versions prior to 8.0.43

Description The Intel(R) Processor Identification Utility, before version 8.0.43, has incorrect default permissions within Ring 3, potentially allowing an escalation of privilege. A local system adversary with an authenticated user and a high complexity attack may enable local code execution. This requires active user interaction and does not require special internal knowledge. The issue may impact the confidentiality, integrity, and availability of the system.

Recommendations Update the Intel(R) Processor Identification Utility to version 8.0.43 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-27246

Affected Products

Intel Processor Identification Utility

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-27246 · Security Note
• https://twitter.com/CVEnew/status/1988303476007596242 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html · Note