Description
Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Scores
CVSS v3
5.7
EPSS
0.0008
EPSS Percentile
22.3%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-667
Status
published
Products (1)
n/a/Intel(R) Core™ Ultra Processors
See references
Published
May 13, 2025
Tracked Since
Feb 18, 2026