๐Ÿ” CVE Alert

CVE-2025-31648

LOW 3.9
CVSS Score
3.9
EPSS Score
0.0%
EPSS Percentile
0th

Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.

CWE CWE-229
Vendor n/a
Product intel(r) processor family may allow an escalation of privilege. startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. this result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. the potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
Published Feb 10, 2026
Last Updated Feb 26, 2026
Stay Ahead of the Next One

Get instant alerts for n/a intel(r) processor family may allow an escalation of privilege. startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. this result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. the potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.

Be the first to know when new low vulnerabilities affecting n/a intel(r) processor family may allow an escalation of privilege. startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. this result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. the potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts. are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

n/a / Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
See references

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
intel.com: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01396.html