Privilege Escalation Vulnerability in Intel One Boot Flash Update Software

CVE-2025-27711

What is CVE-2025-27711?

The Intel One Boot Flash Update software has a vulnerability due to incorrect default permissions in its user applications. This flaw can allow an unprivileged attacker, who has authenticated access, to execute a complex attack that may lead to privilege escalation. The attack can potentially be carried out locally under specific conditions, necessitating active user interaction. This vulnerability poses risks to the system's confidentiality, integrity, and availability, potentially allowing unauthorized access to sensitive information.

References