A privilege escalation vulnerability in the Intel Processor Identification Utility allows an authenticated local user to compromise system confidentiality, integrity, and availability.

The software utilizes unmaintained third party components within Ring 3 user applications. This flaw allows an authenticated local user with low complexity requirements to perform an escalation of privilege.

Successful exploitation of this vulnerability allows an authenticated attacker to elevate privileges, potentially gaining control over the affected system. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to full loss of system integrity and availability for the local host. While local access is required, the potential for unauthorized administrative control necessitates prompt mitigation to prevent lateral movement within the network.

Immediate Action: Update the Intel Processor Identification Utility to version 8.0.43 or later as specified in the official Intel security advisory.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unauthorized attempts to access sensitive system files by standard user accounts.

Compensating Controls: Restrict local execution permissions for non-administrative users to limit the potential for unauthorized software interaction and privilege escalation attempts.

Public Exploit Available: Unknown

This vulnerability presents a significant risk to local system security by enabling unauthorized privilege escalation. Security teams should prioritize the update of the Intel Processor Identification Utility across all managed endpoints to the latest version to eliminate the risk posed by these unmaintained components. Failure to patch may allow local attackers to bypass security restrictions and gain elevated access to the host machine.