CVE-2025-35990
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-35990
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Intel Endpoint Management Assistant (EMA) software | before version 1.14.5 | - |
II. Public POCs for CVE-2025-35990
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-35990
请登录查看更多情报信息。
Same Patch Batch · n/a · 2026-05-12 · 9 CVEs total
| CVE-2025-36515 | AI Playground <3.0.0 未受控搜索路径提权漏洞 | |
| CVE-2025-36510 | Display Virtualization for Windows OS Ring 2驱动拒绝服务漏洞 | |
| CVE-2025-35991 | Intel UEFI固件信息泄露漏洞 | |
| CVE-2025-35979 | Intel CPU VMX非特权本地信息泄露漏洞 | |
| CVE-2025-35969 | Intel Server Firmware Update Utility 16.0.12前权限提升漏洞 | |
| CVE-2025-27723 | Intel Ethernet 800系列<2.3.14内核驱动Use After Free致拒绝服务 | |
| CVE-2023-27753 | MK-Auth 23.01K4.9 任意文件上传漏洞 | |
| CVE-2023-30059 | MK-Auth 23.01K4.9 不安全的直接对象引用漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-35990
No comments yet