CVE-2025-31647

Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-427

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01356.html

Published

Nov 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31640Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2025-31641Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2025-31642Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-31643Incorrect Privilege Assignment vulnerability in Dasinfomedia…8.8
• CVE-2025-31644When running in Appliance mode, a command injection vulnerab…8.7
• CVE-2025-31645Uncontrolled search path for some System Event Log Viewer Ut…6.7
• CVE-2025-31648Improper handling of values in the microcode flow for some I…3.9
• CVE-2025-31649A hard-coded password vulnerability exists in the ControlVau…8.7
• CVE-2025-3165A vulnerability classified as critical has been found in thu…5.3
• CVE-2025-31650Improper Input Validation vulnerability in Apache Tomcat. In…7.5
• CVE-2025-31651Improper Neutralization of Escape, Meta, or Control Sequence…9.8
• CVE-2025-31654An attacker can get information about the groups of the smar…6.9