Search/CVE-2025-35987
● CVE — Medium

CVE-2025-35987

VendorintelProductdata center attestation primitivesDiscoveredAug 11, 2026UpdatedNov 2, 2026

Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (low) impacts.

CVSS v3.1
6.1 MEDIUM
EPSS
0.10%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Nov 4, 2026
● 0.01pp
0.10% → 0.10% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionNONE
ScopeCHANGED
ConfidentialityNONE
IntegrityHIGH
AvailabilityLOW
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Aug 11, 2026
Disclosure — published as a CVE record. · last revised by NVD Nov 2, 2026