Skip to main content

Intel Platforms

1 CVEs product

Monthly

CVE-2025-35991 May 12, 16:35 MEDIUM This Month

Improper initialization in Intel UEFI firmware (Ring 0 / Bare Metal OS layer) enables information disclosure on some Intel platforms. A system software-level adversary already holding high privileges can exploit this flaw under high-complexity, prerequisite-dependent conditions to expose sensitive memory contents, with confidentiality impact rated high but no integrity or availability effect. No public exploit exists and EPSS sits at 0.01% (2nd percentile), and SSVC classifies exploitation status as none - signals that are mutually consistent and indicate this is a low-urgency finding for most organizations.

Information Disclosure Intel N A Intel Platforms
NVD
CVSS 4.0
5.6
EPSS
0.0%
EPSS 0% CVSS 5.6
MEDIUM This Month

Improper initialization in Intel UEFI firmware (Ring 0 / Bare Metal OS layer) enables information disclosure on some Intel platforms. A system software-level adversary already holding high privileges can exploit this flaw under high-complexity, prerequisite-dependent conditions to expose sensitive memory contents, with confidentiality impact rated high but no integrity or availability effect. No public exploit exists and EPSS sits at 0.01% (2nd percentile), and SSVC classifies exploitation status as none - signals that are mutually consistent and indicate this is a low-urgency finding for most organizations.

Information Disclosure Intel N A +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy