Elevation of Privileges in Intel NPU Drivers Affecting User Applications
CVE-2025-33030

2LOW

Key Information:

Vendor

Intel
Status
Intel(r) Npu Drivers
Vendor
CVE Published:
10 February 2026

What is CVE-2025-33030?

An improper conditions check in specific firmware for Intel NPU Drivers may allow an adversary to escalate privileges. By exploiting this vulnerability, an authenticated user could potentially corrupt data through a localized attack that requires low complexity. Local access is essential for the attack, and no user interaction is necessary for execution. This vulnerability raises concerns about the integrity of the affected system, particularly in environments where unprivileged software operates alongside legitimate user applications.

Affected Version(s)

Intel(R) NPU Drivers See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.