CVE-2025-20056

MediumCVSS 4.4/10Last modified Oct 19, 2026

Description

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-200573.5Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to pCVE-2025-200587.5When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilizCVE-2025-200599.1Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java PoCVE-2025-20068.8The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation inCVE-2025-200607.5An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android devicCVE-2025-200619.8mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploitCVE-2025-200626.1Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentCVE-2025-200635.5in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2025-200648.7Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege. SysteCVE-2025-200656.7Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allowCVE-2025-200676.0Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may allow a privileged user to potentially enable informatCVE-2025-200687.1Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege. Sys
CVE-2025-20056: Medium severity, CVSS 4.4 | Vulnix