CVE-2025-35991

🗓️ 05 Jun 2026 19:40:24Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 14 Views

Improper initialization in UEFI firmware may disclose data via local access by privileged user.

Reporter	Title	Published	Views	Family All 13
CNNVD	Intel Xeon Scalable Processors 安全漏洞	12 May 202600:00	–	cnnvd
CVE	CVE-2025-35991	12 May 202616:35	–	cve
Cvelist	CVE-2025-35991	12 May 202616:35	–	cvelist
EUVD	EUVD-2025-209793	12 May 202618:30	–	euvd
HPE Security Bulletins	HPESBHF05052 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01413, UEFI Reference Firmware Advisory, Local Disclosure of Information Vulnerability	12 May 202600:00	–	hpe
HPE Security Bulletins	HPESBHF05053 rev.1 - HPE Compute Scale-up Server 3200 Platform Using Certain Intel Processors, INTEL-SA-01413, UEFI Reference Firmware Advisory, Local Disclosure of Information Vulnerability	25 May 202600:00	–	hpe
HPE Security Bulletins	HPESBHF05054 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01413, UEFI Reference Firmware Advisory, Local Disclosure of Information Vulnerability	14 May 202600:00	–	hpe
HPE Security Bulletins	HPESBHF05055 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01413, UEFI Reference Firmware Advisory, Local Disclosure of Information Vulnerability	17 Jun 202600:00	–	hpe
HPE Security Bulletins	HPESBHF05067 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01413, UEFI Reference Firmware Advisory, Local Disclosure of Information Vulnerability	7 Aug 202600:00	–	hpe
Hewlett-Packard	Intel UEFI Reference Firmware May 2026 Security Update	12 May 202600:00	–	hp

Source	Link
cve	www.cve.org/CVERecord

05 Jun 2026 19:40Current

5.3Medium risk

Vulners AI Score5.3

CVSS 45.6

EPSS0.00095

Intel firmware UEFI vulnerability information disclosure local access privileged user