Information Disclosure Vulnerability in Intel Processors

CVE-2025-35979

What is CVE-2025-35979?

This vulnerability arises from the exposure of sensitive information due to shared microarchitectural predictor state in certain Intel processors when operating in VMX non-root mode. An adversary with local access and authenticated user privileges can exploit this flaw through a complex attack, potentially leading to unauthorized data exposure. The attack does not require specialized internal knowledge and occurs without user interaction, posing a risk to the confidentiality of sensitive information managed by the vulnerable system.

References