CVE-2025-30509

Low

Description

Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

SeverityLow
CVSS3.8
Exploit probability—
ProductIntel Quickassist Technology
PublishedNov 11, 2025
First seenNov 11, 2025

How to fix

Update
  • intel quickassist_technology2.6.0-0018 or later

Affected products

ProductAffected versionsFixed in
intel quickassist_technologyv < 2.6.0-00182.6.0-0018

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.