Uncontrolled Search Path Vulnerability in Intel DSA Software
CVE-2025-26404

5.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Dsa Software
Vendor
CVE Published:
12 August 2025

What is CVE-2025-26404?

The vulnerability in Intel DSA software prior to version 25.2.15.9 involves an uncontrolled search path which may allow authenticated users to leverage local access for potential privilege escalation. This can pose significant risks to system security, enabling unauthorized actions that may compromise sensitive data or system integrity.

Affected Version(s)

Intel(R) DSA software before version 25.2.15.9

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.