CVE-2025-27712

The record

Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Affected packages

Related vulnerabilities

• CVE-2026-4249 The throttling event handling mechanism in multiple WSO2 products accepts user-supplied… CWE-707
• CVE-2026-11457 A security flaw has been discovered in erzhongxmu JeeWMS up to… CWE-707
• CVE-2026-10661 A vulnerability has been found in ahujasid blender-mcp up to… CWE-707
• CVE-2026-10223 A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. CWE-707
• CVE-2026-10222 A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. CWE-707
• CVE-2026-10221 A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. CWE-707
• CVE-2026-10220 A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. CWE-707
• CVE-2026-10210 A vulnerability was found in AstrBotDevs AstrBot 4.23.6. CWE-707