PT-2025-46431 · Unknown · Pri Driver

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-32449

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PRI Driver software versions prior to 03.03.1002

Description An unquoted search path in some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a high complexity attack may enable privilege escalation. This potential issue may occur via local access when attack requirements are present, without special internal knowledge, and requires active user interaction. The potential vulnerability may impact the confidentiality, integrity, and availability of the vulnerable system.

Recommendations Update to version 03.03.1002 or later.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2025-32449

Affected Products

Pri Driver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-32449 · Security Note
• https://twitter.com/CVEnew/status/1988303450439118866 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01394.html · Note