CVE-2025-20053

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-200546.5Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denia CVE-2025-200559.8OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can a CVE-2025-200564.4Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of pr CVE-2025-200573.5Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to p CVE-2025-200587.5When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utiliz CVE-2025-200599.1Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Po CVE-2025-20068.8The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in CVE-2025-200607.5An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android devic CVE-2025-200619.8mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploit CVE-2025-200626.1Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potent CVE-2025-200635.5in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2025-200648.7Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. Syste