CVE-2025-31648
LowSummary
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. A privileged user combined with a high complexity attack may enable this via local access.
Risk Assessment
The organization faces risk of privilege escalation by a local attacker with access to startup code or SMM, potentially leading to full system compromise.
Recommendation
Apply the microcode update provided by the manufacturer immediately and restrict local access to systems with affected Intel processors.
Original NVD description (English source)
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local acce