Uncontrolled Search Path Vulnerability in Intel Processor Identification Utility

CVE-2025-32001

What is CVE-2025-32001?

The Intel Processor Identification Utility contains a vulnerability that allows an attacker to manipulate the search path for executable files. This weakness occurs due to improper handling of application paths before version 8.0.43, potentially enabling an authenticated user to escalate privileges. If exploited, an attacker with local access could execute arbitrary code, posing significant risks to system confidentiality, integrity, and availability. Users are advised to update to the latest version to mitigate these risks.

References