CVE-2025-33000

Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-20

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.htmlVendor Advisory

Published

Nov 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-32992Thermo Fisher Scientific ePort through 3.0.0 has Incorrect A…8.5
• CVE-2025-32993Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL in…6.5
• CVE-2025-32996In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, …5.3
• CVE-2025-32997In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, …5.3
• CVE-2025-32999Cross-site scripting vulnerability exists in a-blog cms vers…5.4
• CVE-2025-3300The WPMasterToolKit (WPMTK) – All in one plugin plugin for W…7.2
• CVE-2025-33003IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 …7.8
• CVE-2025-33004IBM Planning Analytics Local 2.0 and 2.1 could allow a privi…6.5
• CVE-2025-33005IBM Planning Analytics Local 2.0 and 2.1 does not invalidate…8.8
• CVE-2025-33008IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Ga…5.4
• CVE-2025-3301DPA countermeasures are unavailable for ECDH key agreement a…1
• CVE-2025-33012IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.…8.8