Incorrect default permissions in Intel products - CVE-2025-32453

Vulnerability identifier: #VU122793

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-32453

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Intel

Affected software:
Intel Arc graphics
Intel Iris Xe graphics
7th Gen Intel Core Processors
8th Gen Intel Core processor
10th Generation Intel Core Processors
Intel Atom Processors
Intel Pentium Processors
Intel Celeron Processors
9th Generation Intel Core Processors

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01385.html