CVE-2025-30255

Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

• CWE-787

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html

Published

Nov 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30240The affected TP-Link Aginet devices do not properly validate…5.1
• CVE-2025-30241Certain web interface components in affected TP-Link Aginet …8.6
• CVE-2025-30247An OS command injection vulnerability in user interface in W…9.3
• CVE-2025-30248DLL hijacking in the WD Discovery Installer in Western Digit…8.9
• CVE-2025-3025Elevation of Privileges in the cleaning feature of Gen Digit…7.3
• CVE-2025-30254An unauthenticated attacker can obtain a serial number of a …6.9
• CVE-2025-30256A denial of service vulnerability exists in the HTTP Header …7.5
• CVE-2025-30257Unauthenticated attackers can retrieve serial number of smar…6.9
• CVE-2025-30258In GnuPG before 2.5.5, if a user chooses to import a certifi…4.7
• CVE-2025-30259The WhatsApp cloud service before late 2024 did not block ce…3.5
• CVE-2025-3026The vulnerability exists in the EJBCA service, version 8.0 E…6.1
• CVE-2025-30260An allocation of resources without limits or throttling vuln…6.5