Escalation of Privilege in Intel Processor Identification Utility

CVE-2025-20010

What is CVE-2025-20010?

The Intel Processor Identification Utility prior to version 8.0.43 utilizes unmaintained third-party components which may permit escalation of privilege. This vulnerability could allow a system software adversary with authenticated access to execute a low complexity attack, potentially leading to unauthorized privilege escalation. Local access is required, with no special internal knowledge or user interaction necessary. The implications of this vulnerability could severely affect the system's confidentiality, integrity, and availability.

References