PT-2025-46423 · Intel · Intel Thread Director Visualizer

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-31940

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Thread Director Visualizer versions prior to 1.1.1

Description The software has incorrect default permissions within Ring 3 User Applications, potentially allowing an escalation of privilege. An unprivileged software adversary with an authenticated user and a high complexity attack may be able to exploit this. This requires local access, active user interaction, and does not require special internal knowledge. The issue could impact the confidentiality, integrity, and availability of the system.

Recommendations Update to version 1.1.1 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-31940

Affected Products

Intel Thread Director Visualizer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-31940 · Security Note
• https://twitter.com/CVEnew/status/1988303458374713817 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01375.html · Note