CVE-2025-35991
Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-35991?
CVE-2025-35991 has a severity rating that indicates a high risk of information disclosure due to improper initialization in UEFI firmware.
How do I fix CVE-2025-35991?
To fix CVE-2025-35991, update your Intel UEFI firmware to the latest version provided by Intel.
What platforms are affected by CVE-2025-35991?
CVE-2025-35991 affects specific Intel platforms utilizing the Intel UEFI firmware.
What type of attack does CVE-2025-35991 enable?
CVE-2025-35991 may allow a data exposure attack through local access by a privileged user.
Is remote exploitation possible with CVE-2025-35991?
CVE-2025-35991 is primarily a local vulnerability and does not enable remote exploitation.