Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-24491: Intel(R) Killer(TM) Performance Suite Privilege Escalation Risk

CVE-2025-24491 · published 11 months ago

Summary

Some versions of the Intel(R) Killer(TM) Performance Suite may allow an attacker with local access to elevate their privileges, potentially allowing them to access sensitive information, make unauthorized changes, or disrupt system functionality. This issue can be exploited by an attacker with an authenticated user account, and does not require special knowledge. Affected users should update to the latest version of the software to mitigate this risk.

Original advisory text

Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01377.html

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

5.4 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-427Uncontrolled Search Path Element

Timeline

Published11 Nov 2025

Updated26 Oct 2026

First seen7 Mar 2026

Sources

CVE-2025-24491 · NVD

Track software like this

Free during beta