#VU122793 Incorrect default permissions in Intel products - CVE-2025-32453

Vulnerability identifier: #VU122793

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-32453

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Intel Arc graphics
Intel Iris Xe graphics
7th Gen Intel Core Processors
8th Gen Intel Core processor
10th Generation Intel Core Processors
Intel Atom Processors
Intel Pentium Processors
Intel Celeron Processors
9th Generation Intel Core Processors

Software vendor:
Intel

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user can gain elevated privileges on the target system.

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01385.html