Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Search vulnerabilities
CVE-2025-36511
CVSS 4.0 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-41090
Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1 · 1.8 Low
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-36490
Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access.
CVSS 3.1 · 5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-27461
Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access.
CVSS 4.0 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.