CVE-2025-33045

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data writing, and impact Confidentiality, Integrity, and Availability.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-123 CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Sep 9, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-33054.3A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerability affects the fu CVE-2025-330507.5Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.CVE-2025-330517.5Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose informat CVE-2025-330525.5Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.CVE-2025-330538.8External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.CVE-2025-330548.1Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network.CVE-2025-330555.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.CVE-2025-330567.5Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network CVE-2025-330576.5Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network.CVE-2025-330585.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.CVE-2025-330595.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.CVE-2025-33069.8A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown proc