CVE-2025-35990 Intel CVE debrief

Who should care

Security teams and administrators responsible for Intel Endpoint Management Assistant Software should prioritize patching to prevent potential privilege escalation attacks. The vulnerability has a high severity impact, and the affected product is widely used in many organizations. The vulnerability can be exploited by an unauthenticated adversary, which makes it a high priority for patching.

Technical summary

The vulnerability exists in Intel Endpoint Management Assistant Software before version 1.14.5. An unprivileged software adversary with an unauthenticated user and low complexity attack may enable escalation of privilege. The attack requires adjacent access and no user interaction. The potential vulnerability impacts confidentiality, integrity, and availability with high severity. The vulnerability is caused by improper input validation, which allows an adversary to exploit the vulnerability.

Defensive priority

High priority due to potential for privilege escalation with low complexity attack requirements and high severity impact on confidentiality, integrity, and availability.

Recommended defensive actions

• Apply patches or updates to Intel Endpoint Management Assistant Software version 1.14.5 or later.
• Implement compensating controls to monitor and restrict access to vulnerable systems.
• Conduct inventory checks to identify and prioritize patching of affected systems.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-05-12T17:16:13.467Z and was last modified on 2026-07-21T15:42:12.120Z. The NVD entry is currently Analyzed. The vulnerability details are based on the information provided by the NVD and CVE.org. The affected product is Intel Endpoint Management Assistant Software before version 1.14.5. The vulnerability has a high severity impact on confidentiality, integrity, and availability. The evidence is limited to the information provided by the CVE record and NVD entry.

Official resources