A local user can exploit a protection mechanism failure in Intel Workload Services Framework software that runs in Ring 3. The flaw allows the user to elevate their privileges, potentially giving them full control of the system. The vulnerability is identified as CWE‑693, and it can affect confidentiality, integrity, and availability at a high level. No remote code execution or denial‑of‑service is reported; the threat is limited to privilege escalation within the local environment.

Intel Workload Services Framework software; specific versions are not disclosed in the CVE.

The CVSS score of 5.4 indicates medium overall severity. An EPSS score of less than 1 % shows an extremely low probability of active exploitation. The vulnerability is not listed in CISA KEV, meaning no publicly known exploits are in use. The attack vector is inferred to be local, requiring a user with a privileged account and no special internal knowledge. An adversary with local access could, through low‑complexity steps, achieve privilege escalation.