Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.4

Intel CIP Software on Windows May Allow Unauthorized Code Execution

CVE-2025-20050 · published 11 months ago
Summary

An outdated version of Intel's CIP software on Windows systems may allow an attacker to execute unauthorized code, which could compromise the system's security and potentially disrupt its normal functioning. Affected users should update to the latest version of the software to prevent this risk.

What to do
  • Update intel computing_improvement_program to version 2.4.11001 or later.
Affected software
VendorProductAffected versions
intel computing_improvement_program < 2.4.11001
cpe:2.3:a:intel:computing_improvement_program:*:*:*:*:*:*:*:*
Original advisory text
Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary wit...
Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
5.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-427Uncontrolled Search Path Element
Timeline
Published11 Nov 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-20050 · NVD
Track software like this
Free during beta