← Back to CVEs
CVE-2025-31648
LOW3.9
Description
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
CVE Details
CVSS v3.1 Score3.9
SeverityLOW
CVSS VectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Attack VectorLOCAL
ComplexityHIGH
Privileges RequiredHIGH
User InteractionNONE
Published2/10/2026
Last Modified2/10/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-229
References
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.