CVE-2025-20623

MEDIUM5.7

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access

Published May 13, 2025

Modified 2 months ago

No fix available

Details

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.

References

WEBhttps://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html WEBhttps://lists.debian.org/debian-lts-announce/2025/05/msg00021.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-20623

CVSS Analysis

CVSS v3.1

5.7

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness Type (CWE)

Other

CWE-1423

Ecosystems

Timeline

PublishedMay 13, 2025

ModifiedNov 3, 2025