Privilege Escalation Vulnerability in Intel One Boot Flash Update Software

CVE-2025-25059

What is CVE-2025-25059?

The Intel One Boot Flash Update software prior to version 14.1.31 is prone to an uncontrolled search path vulnerability that may allow an unauthorized user to escalate privileges. This vulnerability can be exploited by an adversary with an authenticated user account by leveraging a complex series of actions, requiring local access and user interaction. Successful exploitation of this issue may compromise the confidentiality, integrity, and availability of the affected system, underscoring the need for immediate attention to secure installations.

References