CVE-2025-20100

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
May 13, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-201018.4Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denialCVE-2025-201025.5in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-201036.5Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enabCVE-2025-201047.3Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user tCVE-2025-201058.7Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege. SystemCVE-2025-201066.7Uncontrolled search path in some software installer for some VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits before version 20CVE-2025-201086.7Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authentCVE-2025-201097.8Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potCVE-2025-20117.5The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up CVE-2025-201117.4A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone CVE-2025-201125.1A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker CVE-2025-201137.1A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator fo