CVE-2025-20010

Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-1104

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html

Published

Nov 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20004Insufficient control flow management in the Alias Checking T…8.5
• CVE-2025-20005Improper buffer restrictions in some UEFI firmware for some …5.6
• CVE-2025-20006Use after free for some Intel(R) PROSet/Wireless WiFi Softwa…8.3
• CVE-2025-20007Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-20008Insecure inherited permissions for some Intel(R) Simics(R) P…7.7
• CVE-2025-20009Improper input validation in the UEFI firmware GenerationSet…5.6
• CVE-2025-20011in OpenHarmony v5.0.2 and prior versions allow a local attac…5.5
• CVE-2025-20012Incorrect behavior order for some Intel(R) Core™ Ultra Proce…4.9
• CVE-2025-20013Exposure of sensitive information to an unauthorized actor f…5.5
• CVE-2025-20014mySCADA myPRO does not properly neutralize POST requests sen…9.8
• CVE-2025-20015Uncontrolled search path element for some Intel(R) Ethernet …6.7
• CVE-2025-20016OS command injection vulnerability exists in network storage…7.2