Medium severity · published Nov 11, 2025
CVE-2025-31647
Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege
6.7
CVSS
0.1%
EPSS
No
On KEV
Description
Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Intel(R) Graphics Software ·
before version 25.22.1502.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-31647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-31647
intel.com
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01356.html
More from Intel(R) Graphics Software
8.8
CVE-2024-37355
Improper access control in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access
7.3
CVE-2025-20052
Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via local access
6.7
CVE-2025-32092
Insecure inherited permissions for some Intel(R) Graphics Software before version 25.30.1702.0 within Ring 3: User Applications may allow an escalation of privilege
6.7
CVE-2025-21099
Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access
5.3
CVE-2024-23919
Improper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access
