Escalation of Privilege Vulnerability in Intel Endpoint Management Assistant Software

CVE-2025-35990

What is CVE-2025-35990?

An improper input validation vulnerability exists in Intel Endpoint Management Assistant software prior to version 1.14.5. This flaw could enable an unprivileged adversary to escalate privileges under certain conditions, potentially allowing unauthorized access and control over affected systems. Attackers could exploit this vulnerability with low complexity and without requiring authentication or user interaction. The risk exists mainly when adjacent access to the system is attainable, highlighting the need for immediate updates to mitigate potential threats.

References