Incorrect default permissions in Intel products - CVE-2025-32453

Vulnerability identifier: #VU122793

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-32453

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

7th Gen Intel Core Processors
8th Gen Intel Core processor
10th Generation Intel Core Processors
Intel Atom Processors
Intel Pentium Processors
Intel Celeron Processors
9th Generation Intel Core Processors
Intel Arc graphics
Intel Iris Xe graphics

Install updates from vendor's website.

7th Gen Intel Core Processors - update to 31.0.101.2137
8th Gen Intel Core processor - update to 31.0.101.2137
9th Generation Intel Core Processors - update to 31.0.101.2137
10th Generation Intel Core Processors - update to 31.0.101.2137
Intel Atom Processors - update to 31.0.101.2137
Intel Pentium Processors - update to 31.0.101.2137
Intel Celeron Processors - update to 31.0.101.2137
Intel Arc graphics - update to 32.0.101.7026
Intel Iris Xe graphics - update to 32.0.101.7026

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01385.html

• Multiple vulnerabilities in Intel Graphics