CVE-2025-20108 | THREATINT

Description

Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

Reserved 2024-11-06 | Published 2025-05-13 | Updated 2025-05-15 | Assigner intel

MEDIUM: 5.4CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NMEDIUM: 6.7CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Problem types

Escalation of Privilege

Uncontrolled Search Path Element

References

intel.com/...en/security-center/advisory/intel-sa-01293.html

cve.org (CVE-2025-20108)

nvd.nist.gov (CVE-2025-20108)

Download JSON